Use of location awareness to establish and suspend communications sessions in a healthcare environment

ABSTRACT

A method of managing access to a healthcare information system of a healthcare establishment communications network. The method comprises receiving data regarding a wirelessly detectable tag associated with a clinician; determining whether the clinician is positioned relative to a terminal of the healthcare establishment communications network such that a proximity condition is satisfied based at least in part on the data regarding the wirelessly detectable tag; responsive to the proximity condition being satisfied, providing an opportunity for authentication of the clinician; and responsive to successful authentication of the clinician, establishing a session for the clinician between the terminal and the healthcare information system. The ability to detect proximity of clinician facilitates the process by which the clinician may access the healthcare information system, while the requirement for authentication of the clinician minimizes the risk of data being made available to an unauthorized party.

CROSS-REFERENCE TO RELATED APPLICATION

The present application claims the benefit under 35 U.S.C. 119(e) ofU.S. Provisional Patent Application to Graves et al. entitled “USE OFLOCATION AWARENESS TO ENHANCE COMMUNICATIONS FUNCTIONS IN A HEALTHCAREENVIRONMENT”, Ser. No. 60/651,623, filed on Feb. 11, 2005, herebyincorporated by reference herein.

FIELD OF THE INVENTION

The present invention relates to communications systems and methodshaving application to a healthcare environment, and benefiting fromenhanced functionality and safety due to the availability of locationawareness.

BACKGROUND

In recent years, use of electronic methods to store patient records hasbecome more commonplace, both due to ad-hoc actions by physicians and asan industry response to government pressures. To fully exploit theresultant electronic health records (EHR), physicians and otherclinicians need to be given access to both read and write these records.However, patient data is of a confidential nature, thus creating theproblem of having to balance the need for privacy against the desire tosimplify existing access and authentication protocols and procedures,which are often cumbersome.

In addition, a wide range of communications typically take place in ahealthcare environment and are characterized by various degrees ofcriticality from the perspective of both patients and clinicians. Theefficiency with which communications occur in a healthcare environmentoften directly affects the quality of the healthcare services providedto patients and, in some cases, has a critical impact on the conditionof patients. For instance, in some situations where a few minutes canrepresent the difference between life and death for a patient, theefficiency of communications may be a determining factor in saving thepatient's life.

Moreover, while wireless technology has the potential to provide thedesired improvement in communications efficiency (such as improvedclinician-clinician voice contact and delivery of medical informationfrom databases to the clinician at the point-of-care), theelectromagnetic radiating nature of this technology has led to concernover interference with sensitive medical equipment.

There is a thus a need in the industry for improvements incommunications systems and methods having application in healthcareenvironments.

SUMMARY OF THE INVENTION

In accordance with a first broad aspect, the present invention seeks toprovide a method of managing access to a healthcare information systemof a healthcare establishment communications network. The methodcomprises receiving data regarding a wirelessly detectable tagassociated with a clinician; determining whether the clinician ispositioned relative to a terminal of the healthcare establishmentcommunications network such that a proximity condition is satisfiedbased at least in part on the data regarding the wirelessly detectabletag; responsive to the proximity condition being satisfied, providing anopportunity for authentication of the clinician; and responsive tosuccessful authentication of the clinician, establishing a session forthe clinician between the terminal and the healthcare informationsystem.

In accordance with a second broad aspect, the present invention seeks toprovide a system for managing access to a healthcare information systemof a healthcare establishment communications network, the healthcareestablishment communications network comprising a plurality ofterminals. The system comprises a first functional entity adapted todetermine, based at least in part on data regarding wirelesslydetectable tags associated with respective clinicians, when a particularone of the clinicians is positioned relative to a particular one of theterminals such that a proximity condition is satisfied for theparticular clinician and the particular terminal; a second functionalentity adapted to enable receipt of authentication data from theparticular clinician in response to the proximity condition beingsatisfied for the particular clinician and the particular terminal; anda third functional entity adapted to establish a session for theparticular clinician between the terminal and the healthcare informationsystem in response to receipt of authentication data from the particularclinician and if the received authentication data corresponds topre-determined authentication data associated with the particularclinician.

In accordance with a third broad aspect, the present invention seeks toprovide a computer-readable storage medium comprising a program elementfor execution by a computing device to manage access to a healthcareinformation system of a healthcare establishment communications network.The program element includes computer-readable program code fordetermining, based at least in part on data regarding wirelesslydetectable tags associated with respective clinicians, when a particularone of the clinicians is positioned relative to a particular one of theterminals such that a proximity condition is satisfied for theparticular clinician and the particular terminal; computer-readableprogram code for enabling receipt of authentication data from theparticular clinician in response to the proximity condition beingsatisfied for the particular clinician and the particular terminal; andcomputer-readable program code for establishing a session for theparticular clinician between the terminal and the healthcare informationsystem in response to receipt of authentication data from the particularclinician and if the received authentication data corresponds topre-determined authentication data associated with the particularclinician.

These and other aspects and features of the present invention will nowbecome apparent to those of ordinary skill in the art upon review of thefollowing description of specific embodiments of the invention inconjunction with the accompanying drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

In the accompanying drawings:

FIGS. 1A and 1B are conceptual block diagrammatic views of acommunications network in a hospital, including a plurality ofterminals, a hospital information system (HIS) and a controller;

FIG. 1C is a detailed block diagrammatic view of the controller, inaccordance with an embodiment of the present invention;

FIG. 1D shows an example structure of an equipment database, a cliniciandatabase and an electronic health record;

FIG. 2A is a flowchart showing steps in an authentication processperformed by an authentication entity in the HIS, in accordance with anembodiment of the present invention;

FIG. 2B shows interaction among various elements of the communicationsnetwork as a result of performing the authentication process, inaccordance with an embodiment of the present invention;

FIG. 3A illustrates two instances of a scenario where a clinician islocated in proximity to a terminal of the hospital communicationsnetwork;

FIG. 3B is a flowchart showing steps in a session establishment processperformed by the controller, in accordance with an embodiment of thepresent invention;

FIG. 3C depicts a path of an established session through elements of thecommunications network, in accordance with an embodiment of the presentinvention;

FIG. 4 is a flowchart showing steps in a session resumption processperformed by the controller, in accordance with an embodiment of thepresent invention;

FIG. 5A illustrates a scenario in which a clinician who has anestablished session with one terminal of the communications network islocated in proximity to a second terminal of the communications network;

FIG. 5B is a flowchart showing steps in a session transfer processperformed by the controller, in accordance with an embodiment of thepresent invention;

FIG. 5C illustrates the scenario of FIG. 5A upon transfer of at leastpart of the session to the second terminal, in accordance with one pathin the flowchart of FIG. 5B;

FIGS. 5D through 5G illustrate the scenario of FIG. 5C after are-transfer of part of the session back to the first terminal, inaccordance with various embodiments of the present invention;

FIGS. 6A and 6B are conceptual block diagram views of a communicationsnetwork, including a plurality of terminals, a hospital informationsystem (HIS) and a controller;

FIG. 7 depicts detection of a burst of radio frequency emitted by a tagin order to determine the location of the tag, in accordance with anembodiment of the present invention;

FIG. 8 is a detailed block diagrammatic view of the controller of FIGS.6A and 6B, in accordance with an embodiment of the present invention;

FIGS. 9A to 9C combine to create a flowchart showing steps in a processused to establish communications with a target clinician in thehospital, in accordance with an embodiment of the present invention;

FIG. 10 is a flowchart showing steps in a process used to establishcommunications with a team of clinicians required to respond to amedical event in the hospital, in accordance with an embodiment of thepresent invention;

FIG. 11 shows an example structure of the equipment database that isenhanced for the purposes of enabling a function that tracks equipment,in accordance with an embodiment of the present invention;

FIG. 12 shows an example structure of the equipment database that isenhanced for the purposes of enabling a function that monitors RFinterference, in accordance with an embodiment of the present invention;

FIG. 13 is a flowchart showing steps in a process used to monitor andcontrol RF interference, in accordance with an embodiment of the presentinvention;

FIGS. 14 and 15 are flowcharts showing steps in two alternative versionsof a process used to describe control of, and interaction with, acharger of mobile terminals, in accordance with an embodiment of thepresent invention.

DETAILED DESCRIPTION OF EMBODIMENTS

1. First System Architecture

FIGS. 1A and 1B show a conceptual view of a communications network 10 ofa healthcare establishment, in accordance with a first example ofimplementation of the present invention. For ease of reading, thehealthcare establishment will hereinafter be referred to as a hospital,but it should be understood that the healthcare establishment may be ofany size and may consist of a single building or a campus including oneor more buildings or pavilions and possibly one or more adjacent areassuch as roads and parking lots.

A plurality of fixed terminals 14A and a plurality of mobile terminals14B serve as entry points to the communications network 10. Theterminals 14A, 14B are accessed by a plurality of “clinicians” 20 whoare mobile within the hospital. The term “clinician” is used to denotethe broad category of individuals who may require access to thecommunications network 10 in the execution of their duties pertaining todiagnosis and/or treatment of one or more patient. While not intended tobe an exhaustive list, typically clinicians 20 can include physicians,radiologists, pharmacists, interns, nurses, laboratory technicians andorderlies, who are all involved in patient diagnosis and/or treatment.In contrast, hospital administrative management, building facilitiesstaff and janitorial staff are not considered to be “clinicians” underthis interpretation.

The communications network 10 also includes a tag/detector subsystem(TDS) 16 connected to a controller 18, which is connected to ahealthcare information system (HIS) 12. In the non-limiting example ofimplementation shown in greater detail in FIG. 1C, the HIS 12 includes aclinician database 22, a patient database 24, a departmental database 26and an equipment database 35, as well as an authentication entity 28 anda point-of-care (POC) server 30. In addition, the HIS 12 may permitaccess to a trusted external database 27, for instance a nationalelectronic health record (EHR) database, via a secure link 29.

The aforementioned components of the communications network 10 will nowbe described in greater detail.

Terminals 14A, 14B

The terminals 14A, 14B allow communication between the clinicians 20 andthe HIS 12 via the controller 18. Terminals 14A are fixed-wireterminals, such as stationary terminals or workstations, connected tothe controller 18 via communication links 57A. Terminals 14B are mobileterminals, such as handheld units (e.g., personal digital assistant(PDA)) or laptop computers, which communicate with the controller 18 viacommunication links 57B that include wireless portions. The wirelessportions of the communication links 57B are secure links that may beencapsulated within the communications network 10, as would be the casefor a wireless local area network (WLAN) using WLAN access points 60. Inanother embodiment, the wireless portions of the communication links 57Bmay involve an external network connection, as would be the case whenthe mobile terminals 14B are cellular phones or cellular data devices.

Each of the terminals 14A, 14B has a display capability, which may bedifferent for different types of terminals. For example, mobileterminals 14B may have display capabilities limited by the necessity ofbeing portable and hence of small size. On the other hand, certain onesof the fixed-wire terminals 14A may have superior display capabilities,not being faced with the same constraints as mobile terminals. Forexample, some fixed-wire terminals 14A may be uniquely qualified fordisplaying full diagnostic quality radiology images.

Equipment Database 35

With reference to FIG. 1D, the equipment database 35 stores informationon the hospital's equipment such as terminals and medical devices. Forexample, the equipment database 35 comprises a plurality of fields foreach piece of equipment, including a unique equipment identifier 103(e.g., a serial number) and, in the case of equipment having a “tag”(further information regarding tags is provided herein below), anequipment-specific tag ID 105 associated with a tag that is expected tobe associated with that piece of equipment. Still other informationregarding the specific piece of equipment may include, inter alia, anequipment type 107 (such as “terminal”, “fixed terminal”, “mobileterminal”, “PDA”, “fetal heart monitor”, etc.) and a display capability109 (as described in the preceding paragraph). Still other informationmay be stored in the equipment database 35, such as a predeterminedlocation of a static piece of equipment, if known.

Clinician Database 22

The clinician database 22 stores information regarding the clinicians20. In one embodiment, with reference to FIG. 1D, the informationregarding a specific clinician 20 includes a unique clinician identifier38 (e.g., an employee number) for the specific clinician 20, as well as“authentication information” 40 for the specific clinician 20. Theauthentication information 40 can be, for instance, a password and/ordata indicative of a biometric characteristic such as a fingerprint orretina scan of the specific clinician 20. Other information regardingthe specific clinician 20 may include a clinician-specific tag ID 42associated with a tag that is expected to be worn by the specificclinician 20. (Further information regarding tags is provided hereinbelow.) Still other information regarding the specific clinician 20 mayinclude, inter alia, a profile 44 of the specific clinician 20, whichdefines certain qualifications of the specific clinician 20, as well asaccess privileges 46 defining types of information of the HIS 12 thatthe specific clinician 20 is allowed to access. For example, if thespecific clinician 20 is a physician, still further other informationregarding the physician can include a list of patients under theresponsibility of the physician and/or a list of facilities commonlyused by the physician.

Patient Database 24

The patient database 24 stores information on the hospital's patients.In one embodiment, with reference to FIG. 1D, the patient database 24 isconfigured as a database of electronic health records, whereby theinformation on each patient is stored as an electronic health record(EHR) 47 of the patient. For example, the EHR 47 of a given patient caninclude information regarding: the long-term and short-term healthhistory of the patient; the treatment and/or surgical history of thepatient; one or more diagnostics on the condition of the patient;ongoing and/or planned treatments or surgery for the patient; results ofone of more tests performed on the patient (e.g., blood test results,images from medical imaging techniques (e.g. x-rays, MRI images, etc.),or results from any other conceivable test performed on the patient); aswell as other information specific to the patient such as admissionsrecords. Due to the sensitive and confidential nature of thisinformation, access to the information contained in the patient database24 is subject to various authentication and access privilegeverifications, as described in further detail below.

Departmental Database 26

The departmental database 26 (there may be more than one) storesinformation related to a respective department of the hospital. Forinstance, the radiology department of the hospital may have its owndatabase storing x-ray images and/or images from other modalitiesgenerated as a result of tests performed on patients of the hospital.Similarly, other departments of the hospital, such as the cardiology,chemotherapy, physiotherapy, pharmacy, emergency room, admissions,billing, maintenance, supplies, administration, kitchen, cafeteria, andany other conceivable department of the hospital, may have their owndatabases storing information pertaining to their respective nature andactivities. Again, it should be understood that FIG. 1C depicts only oneof many possible architectures for the HIS 12 and that various otherarchitectures are possible without leaving the scope of the presentinvention. For example, in a possible architecture, the HIS 12 includesmultiple departmental databases 26, or includes no departmentaldatabase, with all of the information related to the departments of thehospital being stored in a global database (not shown) of the HIS 12.

POC Server 30

The POC server 30 comprises suitable software, hardware and/or controllogic for implementing a variety of functions, including a data miningfunction 48, one or more application functions 50, a display formattingfunction 52 and a session management function 53.

The purpose of the session management function 53 is to administrate“sessions” for authenticated clinicians interacting with the HIS 12 viathe various terminals 14A, 14B in the communications network 10. As willbe seen later on, a session established for a given clinician isbasically a connection between a given terminal and the HIS 12, allowingthe given clinician to run clinical applications at the given terminalor within the HIS 12 and to exchange information with the HIS 12 via thegiven terminal. The given terminal is said to “support” the session forthe given clinician. Administrating a session involves any one or moreof establishing, canceling, suspending, resuming and/or changing thedata rate, accessible applications and/or accessible information of thesession, as a function of various factors such as authentication andauthorization levels.

During the course of a session for an authenticated clinician, theclinician may input certain queries, commands or responses, which areprocessed by the session management function 53, resulting in an actionsuch as: a request for data to be read from or written to the HIS 12(via the data mining function 48), activation of a clinical application(via the application functions 50), termination or suspension of thesession, etc. Data destined for the authenticated clinician during asession is sent via the display formatting function 52. Further detailregarding the manner in which sessions are established between the HIS12 and the terminals 14A, 14B will be provided herein below.

The purpose of the data mining function 48 is to retrieve from theclinician database 22, the patient database 24, the departmentaldatabase 26, the equipment database 35 and the external database 27,information to be made available at the terminals 14A, 14B for sessionsestablished between the HIS 12 and the terminals 14A, 14B. Similarly,the data mining function 48 is also operative to modify informationcontained in the above-mentioned databases or add new information tothese databases as a result of sessions established between the HIS 12and the terminals 14A, 14B. In this way, the data mining function 48acts as a conduit between the databases 22, 24, 26, 35, 27 and theclinicians 20.

The purpose of the one or more application functions 50 is to runvarious applications that may be required to process informationexchanged in the course of sessions established between the HIS 12 andthe terminals 14A, 14B. Examples of such applications are computerizedphysician order entry (CPOE) applications, decision information supporttools (DIST), and any other conceivable applications that may berequired based on the nature of the various sessions that can beestablished between the HIS 12 and the terminals 14A, 14B.

The purpose of the display formatting function 52 is to format theinformation to be displayed on the display of a specific one of theterminals 14A, 14B in accordance with the display capability of thatdisplay. For instance, the display formatting function 52 may cause anx-ray image to be displayed in its entirety and with high-resolution atone of the fixed terminals 14A having a display of relatively large sizeand high resolution, yet may cause the same x-ray image to be displayedonly in part and/or with low-resolution at one of the mobile terminals14B (e.g., a PDA) having a display of relatively small size and lowresolution. Knowledge of the display capability of each of the terminals14A, 14B may be stored in the display formatting function 52 or may beobtained from the terminals themselves during sessions between theterminals 14A, 14B and the HIS 12.

The above-mentioned functions of the POC server 30 implement a so-called“thin client” or “semi-thin client” architecture, whereby the bulk ofthe processing, such as retrieval, modification, addition, andformatting of information as well as running of applications involved insessions established between the terminals 14A, 14B and the HIS 12, ismainly handled by the POC server 30. In such an architecture, theterminals 14A, 14B basically act as dependent terminals, primarilyproviding display and input functions. Advantageously, in such anarchitecture, sensitive information such as information regarding thehospital's patients does not need to be stored in non-volatile form atthe terminals 14A, 14B during established sessions, thereby inhibitingaccess to such sensitive information via a given one of the terminals,should such be stolen or otherwise compromised. However, it is to beunderstood that, in other examples of implementation, part or all of theprocessing involved in sessions established between the terminals 14A,14B and the HIS 12 may be handled by the terminals 14A, 14B.

Tag/Detector Subsystem (TDS) 16

The TDS 16 basically includes a system of tags and tag detectors, withthe tags being attached to people (e.g., clinicians) or equipment (e.g.,terminals, medical devices) that are to be tracked (e.g., because theyare mobile), and the detectors being attached to the entry points intothe communications network 10. The tags are referred to as being“wirelessly detectable”, in the sense that their presence can bedetected by a detector without requiring that a fixed-wire connection beestablished between the tags and the detector.

As best seen in FIG. 1B, the tags include a first plurality of tags 36Arespectively associated with the clinicians 20 and a second plurality oftags 36B respectively associated with the mobile terminals 14B. By wayof specific non-limiting example, the tags 36A attached to theclinicians 20 may be in the form of badges clipped to, or sewn into, theclothing of the clinicians 20. As for the tags 36B attached to themobile terminals 14B, these may take the form of embedded or adhesivelymounted devices. Of course, other ways of associating tags 36A toclinicians 20, and associating tags 36B to mobile terminals 14B, will beknown to those of ordinary skill in the art and are within the scope ofthe present invention.

A given tag 36A, 36B operates in such a way as to allow its location andidentity to be detected by a compatible detector. For instance, it mayemploy a brief radio frequency signal that encodes an identifier of thegiven tag 36A, 36B, hereinafter referred to as a “tag ID” 58. Withoutbeing interpreted as a limitation of the present invention, the tags36A, 36B can be active (i.e. the tag frequently or periodically emits asignal), semi-active (i.e. the tag emits a signal only in response toreceiving another signal), or passive (i.e. the tag only reflects areceived signal). The decision to use active, semi-active or passivetags depends on various factors such as the required range, precision,and power consumption/battery lifetime/weight considerations. Also,other technologies may be used without departing from the scope of thepresent invention, such as acoustical, ultrasonic, optical, infrared,etc. As a non-limiting example example, one may use the UWB precisionlocation receivers and tags from Multispectral Solutions, Inc. ofGermantown, Md., USA.

The detectors include a first plurality of detectors 34A respectivelyassociated with the fixed-wire terminals 14A and a second plurality ofdetectors 34B respectively associated with the mobile terminals 14B. Thedetectors 34A, 34B detects aspects of the location of the tags 36A, 36Bas well as the tag ID 58. For instance, with detectors and tagsutilizing RF transmission technologies, and depending on the type of tagused, each of the detectors 34A, 34B may include either a receiver forreceiving radio frequency signals emitted by active tags, or both atransmitter for emitting radio frequency pulses and a receiver forreceiving radio frequency signals emitted (or reflected) by semi-active(or passive) tags in response to the emitted radio frequency pulses.

As shown in FIG. 1B (which can be viewed as an overlay onto FIG. 1A),detectors 34A are connected to the controller 18 via communication links56A. Since detectors 34A are associated with the fixed terminals 14A, itmay prove economical or efficient to use the same physical medium forcommunication links 57A and 56A. Similarly, detectors 34B are connectedto the controller 18 via communication links 56B that may includewireless portions. Since detectors 34B are associated with the mobileterminals 14B, it may prove economical or efficient to use the samephysical medium for communication links 57B and 56B. However, this isnot a requirement of the present invention.

Moreover, it is noted that in the case of detectors 34B, the associatedmobile terminals 14B are also associated with the tags 36B as indicatedabove. Hence, in some embodiments, it may prove economical or efficientto equip each mobile terminal 14B with a single radio-frequency devicethat incorporates an individual detector 34B as well as the associatedtag 36B. However, this is not a requirement of the present invention.

In view of the above, it will be apparent that the detectors 34A, 34Breceive signals from one or more nearby tags 36A, 36B, detect the tagIDs 58 in the received signals and communicate the tag IDs 58 to thecontroller 18 along a set of communication links 56. The informationcontained in the tag ID 58 is unique for the various tags 36A, 36B.Assuming that there is a one-to-one physical association between theclinicians 20 and the tags 36A, then the tag ID 58 for the tag 36Aattached to a given clinician 20 can contain the clinician identifier 38of the given clinician 20. (Alternatively, if the clinician identifier38 needs to be kept confidential, then the tag ID 58 can contain theclinician -specific tag ID 42 for the given clinician 20.) Similarly, ifthere is a one-to-one physical association between the mobile terminals14B and the tags 36B, then the tag ID 58 for the tag 36B attached to agiven mobile terminal 14B can contain a serial number or MAC address ofthe given mobile terminal 14B.

In addition to detecting the tag IDs 58 in the signals received from thetags 36A, 36B and forwarding the tag IDs 58 to the controller 18, thedetectors 34A, 34B generate range messages 54 indicative of the distancebetween the tags 36A, 36B and the detectors 34A, 34B. The generation ofthe range messages 54 can be based on the intensity of the receivedsignals, or on the round-trip travel time of individual tag IDs. Therange messages 54 may contain information permitting the determinationof range (distance) between a given detector and a given tag, or theymay reflect the result of signal processing at the given detector byvirtue of which it was concluded that the given tag is “in proximity” tothe given detector. Those skilled in the art will appreciate that stillother parameters or characteristics of a signal received at a particulardetector may serve as the basis to generate the range messages 54 for aparticular tag ID 58 relative to a particular detector 34A, 34B.

It should also be understood that in cases where clinicians 20 areassumed at all times to be using specifically assigned mobile terminals14B, the need for separate tags 36A, 36B attached to both the clinicians20 and the mobile terminals 14B may be obviated, as long as the singletag contains the ability to convey authentication data from theclinician, as may be required in order to satisfy security constraints.Rather, a single set of tags (either 36A or 36B) would suffice to enablethe various functions described herein.

It will thus be appreciated from the foregoing, as well as from portionsof the description to follow, that detection by a particular detector ofthe tag ID 58 corresponding to a particular tag may lead to a conclusionthat a clinician 20 or mobile terminal 14B is somewhere in the vicinityof the particular detector. In the case of a suspected nearby clinician20, this implied knowledge should be confirmed by way of anauthentication process, which will be described in further detail in thenext section.

Authentication Entity 28

The authentication entity 28 comprises suitable software, hardwareand/or control logic for implementing an authentication process 70,which positively confirms the clinician's identity and which managesaccess of the clinicians 20 to the HIS 12 via the terminals 14A, 14B. Itshould be understood that the authentication entity 28 may be a separateentity or it may be integrated to the controller 18 or to the POC server30, for example.

The authentication process 70 is now described in greater detail withadditional reference to FIGS. 2A and 2B. More particularly, at step 202,the authentication entity 28 receives from the controller 18 theclinician identifier of a candidate clinician 20 who needs to beauthenticated. This may be triggered under various conditions describedlater on in greater detail. Let the clinician identifier of thecandidate clinician 20 be denoted 38* and let the authenticationinformation for the candidate clinician 20 be denoted 40*.

The authentication process 70 then proceeds to step 204, whereauthentication data is requested from the candidate clinician 20. Oneexample of authentication data is a password; another example ofauthentication data is biometric information. To this end, the badgesworn by clinicians 20 may optionally be enhanced with a fingerprintreader operative to generate data indicative of a fingerprint of anyone(including of course the clinician himself/herself) touching thefingerprint reader. A non-limiting example of a fingerprint reader thatis adequately dimensioned to be incorporated into a badge in the mannercontemplated herein is the FingerLoc® AF-S2 fingerprint sensormanufactured by AuthenTec, Inc. Melbourne, Fla., USA, (see alsowww.authentec.com). The fingerprint of the candidate clinician 20 wouldbe scanned by the sensor and the results of the scan transmitted to theauthentication entity 28. The results of the scan may be in the form ofa digitized image of the fingerprint or other metrics derived from localprocessing of the image.

Responsive to receipt of the authentication data, the authenticationprocess 70 proceeds to step 206, where the authentication entity 28communicates with the clinician database 22 (via the data miningfunction 48) to obtain, for comparison purposes, the storedauthentication information 40* for the candidate clinician 20. This canbe done by supplying to the clinician database 22 the clinicianidentifier 38* of the candidate clinician 20, which was supplied by thecontroller 18 at step 202.

The authentication process 70 then proceeds to step 208, where anauthentication result is generated. Specifically, the receivedauthentication data is compared to the stored authentication information40* for the candidate clinician 20 as obtained from the cliniciandatabase 22 at step 206. The authentication result will be a successwhen there is a match and a failure otherwise. At step 210, theauthentication result is returned to the controller 18, whereconsequential actions are taken in a manner that will be described ingreater detail herein below.

It should be understood that steps 206 and 208 of the authenticationprocess 70 may be replaced by a single step whereby the authenticationentity 28 sends the received authentication data to the cliniciandatabase 22, prompting the latter to effect the comparison with thestored authentication information 40* for the candidate clinician 20 andto return the authentication result to the authentication entity 28.This alternative approach may be advantageous from the point of view ofdata security, since the stored authentication information 40* for thecandidate clinician 20 need not exit the clinician database 22.

It should also be understood that other layers of security andauthentication may be provided without departing from the scope of thepresent invention. For example, the tag IDs 58 may be encrypted toprevent spoofing of the authentication information by a non-valid tag.In addition, or alternatively, the tags 36A can contain memory andprocessing to associate a clinician's biometric data (such as afingerprint) to that tag so that authentication is performed locally atthe tag either in addition to, or instead of, at the authenticationentity 28.

Controller 18

As previously mentioned, the controller 18 is connected to the TDS 16 bythe communication links 56A, 56B, to the terminals 14A, 14B by thecommunication links 57A, 57B, as well as to the authentication entity 28and to the POC server 30. In this first system architecture, thecontroller 18 comprises suitable software, hardware and/or control logicfor implementing a clinician proximity monitoring process 80 thatoperates in the background until it detects that a certain condition issatisfied, whereupon further processing operations are performed. Thedetailed operation of the controller 18 is now described, beginning withthe clinician proximity monitoring process 80.

Clinician Proximity Monitoring Process 80

The clinician proximity monitoring process 80 monitors the output of theTDS 16 to decide when individual clinicians 20, for whom sessions havenot been established, are considered “in proximity” to individual onesof the terminals 14A, 14B. As will be described later on, being deemed“in proximity” has attributes of distance (usually less than a pre-setthreshold value) and may also have attributes of time/duration, since aperson transiting past a location has a different intent than someoneremaining within a certain distance of a location for a certainduration. In one embodiment, the clinician proximity monitoring process80 operates in the background until it detects that a trigger conditionis satisfied, whereupon further processing operations are performed

With reference to FIG. 3A, it is recalled that in this first systemarchitecture, clinicians 20 are associated with tags 36A, and detectors34A, 34B are terminal-specific. In other words, a given clinician ofinterest (denoted 20*) being “in proximity” to a given terminal ofinterest (denoted 14*) amounts to the tag 36A associated with clinician20* being “in proximity” to the detector 34A, 34B associated withterminal 14*. The ability of the clinician proximity monitoring process80 to make decisions regarding individual clinicians 20 (includingclinician 20*) being in proximity to terminal 14* stems from theprocessing of tag IDs 58 and range messages 54 received from the TDS 16.

The definition of “in proximity” may vary in accordance with operationalrequirements. In one embodiment, clinician 20* being “in proximity” toterminal 14* may be defined as satisfaction of a computed “proximitycondition”, which occurs when the estimated distance between clinician20* and terminal 14* is below a threshold distance, continuously, for atleast the duration of a time window. Generally speaking, a judiciouschoice of distance and/or the distance-time relationship ensures smooth,easy attachment and authentication for clinicians desirous of suchevents while not triggering “false starts” due to transient cliniciantraffic passing nearby terminal 14*. Too “close” a distance thresholdleads to trouble triggering a greeting message/opportunity toauthenticate, while too “far” a distance threshold leads to triggeringnumerous unnecessary greeting messages, which may ultimately affectexisting sessions and/or core system load. Moreover, too brief a “timewindow” results in increased likelihood of false “in proximity”detections, while too lengthy a “time window” (say more than 1-2seconds) will make the system seem sluggish and unresponsive.Additionally, the proximity condition may be variable in terms of bothdistance and duration—for instance a closer distance requiring a shortertime window. Of course, it is within the scope of the present inventionto further refine the definition of the proximity condition usingadditional factors. For instance, such additional factors may includethe identity or professional role of clinician 20*, the physicallocation of static equipment in the hospital and/or the hospitaldepartment in which terminal 14* is located.

Once the clinician proximity monitoring process 80 has determined thatthe proximity condition has been satisfied for clinician 20* withrespect to terminal 14*, the controller 18 executes a sessionestablishment process 82, shown in FIG. 1C and now described withadditional reference to FIGS. 3B and 3C.

Session Establishment Process 82

Although the clinician proximity monitoring process 80 has deemedclinician 20* to be in proximity to terminal 14*, his or her intent touse terminal 14* has not yet been established. Accordingly, at step 302of the session establishment process 82, the controller 18 sends acommand to the display formatting function 52, causing the latter todisplay a greeting message on the display of terminal 14* for clinician20*. For instance, assuming that clinician 20* is a certain Dr. Jones,the greeting message displayed on the display of terminal 14* may be“Welcome Dr. Jones. Please confirm your identity if you wish to use thisterminal”, or any conceivable variant thereof. It is noted that sincethe identity of terminal 14* is considered to be known by the displayformatting function 52, its display capabilities will also be known apriori.

Meanwhile, or following execution of step 302, the controller 18proceeds to step 304, which causes execution of a preliminary processingoperation in anticipation of potential establishment of a session forclinician 20* between the HIS 12 and terminal 14*. In a non-limitingexample of a preliminary processing operation, the controller 18 sends acommand to the data mining function 48 in the POC server 30, causing thelatter to pre-fetch information from the clinician database 22, thepatient database 24, the departmental database 26, the equipmentdatabase 35 and/or the external database 27 in anticipation of potentialestablishment of a session for clinician 20*.

In the specific non-limiting case where clinician 20* is a physician,the pre-fetched information may include one or more of the profile ofthe physician; the access privileges of the physician; a list ofpatients under the responsibility of the physician; information (e.g.,an electronic health record 47, or a portion thereof) related to one ormore patients in the list of patients under the responsibility of thephysician; and information related to one or more patients in proximityto terminal 14*.

It should be appreciated that the identity of patients in proximity toterminal 14* can be obtained in various ways. In one embodiment,terminal 14* is one of the fixed-wire terminals 14A, and the knowledgeof nearby patients is obtained on the basis of information stored in thepatient database 24, the departmental database 26, the equipmentdatabase 35 and/or the external database 27, such as the location ofterminal 14* within the hospital and the location of each patient's bedwithin the hospital. In another embodiment, each patient is providedwith a tag such as a tag in the form of a bracelet worn by the patient.In such an embodiment, the tag of a patient interacts with the detector34A of terminal 14* in the aforementioned manner, allowing thecontroller 18 to learn of the relative proximity of each patient toterminal 14*. Alternatively, a standard RF-ID tag could be used,although in such an embodiment, there may be limitations in terms ofrange that need to be taken into consideration.

In addition, the information that is pre-fetched may also be organizedor filtered by using the clinician's location and identity. For example,the list of patients for a particular physician may be sorted by thosewhose assigned beds are nearest the particular physician.

The information that is pre-fetched by the data mining function 48 iskept in a holding location 74 that is accessible to the sessionmanagement function 53 but as yet inaccessible to clinician 20* deemedto be in proximity to terminal 14*. More specifically, the pre-fetchedinformation will become available to clinician 20* once a session isestablished for clinician 20*, but such a session has not yet beenestablished because (1) the intent of clinician 20* to use terminal 14*is still not known; and (2) clinician 20* has not been authenticated(for example, it has not yet been confirmed that the individual who ispresumed to be Dr. Jones by virtue of information received from the TDS16 really is Dr. Jones).

At step 306, the controller 18 continues to attempt to establish theintent of clinician 20* to use terminal 14* by waiting for input fromclinician 20* in response to the greeting message. At this point, twobasic outcomes are possible. In the first outcome, clinician 20* ignoresthe greeting message. Accordingly, the controller 18 will detect anabsence of a response for a predetermined amount of time and willconclude that there is no intent by clinician 20* to use terminal 14*.This leads to execution of step 308, whereby a command is sent to thedisplay formatting function 52, causing the greeting message todisappear from the display of terminal 14*. In addition, the controller18 performs step 310, which is optional, whereby a command is sent tothe session management function 53 to delete the pre-fetched informationin the holding location 74 in order to avoid potential security leaksdue to hacking. In an alternative embodiment, step 310 is replaced by adifferent series of steps, whereby the pre-fetched data may be held inthe holding location 74 until clinician 20* leaves the vicinity ofterminal 14*, so that the pre-fetched data can be delivered quickly,should clinician 20* later decide, during his/her patient encounter, toinitiate a session. Thus, even though a session is not established forclinician 20*, it can be said that the pre-fetched data is held in trustfor clinician 20*.

However, in the alternate outcome of step 306, clinician 20* does indeedrespond to the greeting message in a timely manner, e.g., by pressing akey or touching the screen. This is interpreted by the controller 18 asan intent to use terminal 14*, and leads to step 312. Specifically, thecontroller 18 sends a message to the authentication entity comprisingthe clinician identifier of clinician 20*, denoted 38*. Receipt ofclinician identifier 38* by the authentication entity 28 triggers theauthentication process 70 previously described with reference to FIGS.2A and 2B, which typically involves the submission of authenticationdata 40* by clinician 20* (e.g., via a fingerprint reader).

In an alternative embodiment, steps 302 and/or 312 may be omitted. Forexample, without having executed step 302, the controller 18 proceeds tostep 304, which causes execution of a preliminary processing operationin anticipation of potential establishment of a session for clinician20* between the HIS 12 and terminal 14*. At this point, without havingdisplayed a greeting message, the controller 18 is attentive toclinician 20* requesting a session by touching a fingerprint reader onclinician 20*'s badge. This will be interpreted by the controller 18 asan intent to use terminal 14* as well as a submission of authenticationdata 40* by clinician 20*. In other words, steps 302 and 312 can beomitted if the mere fact that authentication data is submitted byclinician 20* serves to confirm the intent of clinician 20* to useterminal 14*. Hence, the use of greetings is not required. Of course,whether or not a greeting message is used is a design consideration, andboth approaches are to be considered as being within the scope of thepresent invention.

In either case, at step 314, the controller 18 receives anauthentication result from the authentication entity 28. If theauthentication result is a failure, then clinician 20* may be allowed tomake one or more additional attempts to authenticate himself or herselfin accordance with security policies in effect. However, ifauthentication fails each time, then clinician 20* is denied access tothe information contained in the HIS 12, i.e. no session is establishedfor clinician 20*. Specifically, at step 316, the controller 18 sends acommand to the display formatting function 52, causing a change in thedisplay of terminal 14* (e.g., blank screen). In addition, thecontroller 18 performs step 318, whereby a command is sent to thesession management function 53 to delete the pre-fetched information inthe holding location 74 in order to avoid potential security leaks dueto hacking.

On the other hand, the authentication result may be a success, in whichcase the controller 18 proceeds to step 320, where additional processingis performed in order to effect establishment of a session for clinician20*. Specifically, the controller 18 sends a message to the sessionmanagement function 53 in the POC server 30, which indicates to thesession management function 53 that the clinician who is deemed to be atterminal 14* is permitted to access the pre-fetched information in theholding location 74 as well as possibly other information in the HIS 12.With specific reference to FIG. 3C, the session management function 53establishes a connection 350 between the HIS 12 and terminal 14*,allowing clinician 20* to exchange information with the HIS 12 viaterminal 14*. The connection 350 is hereinafter referred to as a“session”, while terminal 14* is said to “support” the session 350 forclinician 20*.

It will thus be appreciated that establishment of the session 350 forclinician 20* at terminal 14* has been facilitated by (1) preparinginformation in anticipation of the intent of clinician 20* to useterminal 14*, thereby reducing the real-time computational load of thePOC server 30 and other elements of the HIS 12; and (2) simplifying thelog-in procedure for clinician 20* to a “confirmation of identity”procedure, whereby clinician 20* is simply required to provide data forhis or her authentication; this can advantageously be done by clinician20* touching a fingerprint reader on his or her badge.

It should also be understood that, in some situations, two or moreclinicians 20 may be in proximity to terminal 14* at a given instant. Inthose situations, the controller 18 may then cause the POC server 30 topre-fetch information related to each one of the nearby clinicians 20 inanticipation of potential establishment of a session for one or more ofthese individuals at terminal 14*. In cases where more than one of thenearby clinicians 20 simultaneously wish to use terminal 14*, thecontroller 18 may effect establishment and management of a session for agiven one of those individuals based on a “first to authenticate” basisor based on an access priority for each one of those individuals (e.g.the access privileges of the nearby clinicians 20 may specify that one,e.g., a doctor, has access priority over the other, e.g., a nurse,etc.).

Conduct Session Process 84

Once the session 350 is established, the controller 18 enters a “conductsession” process 84 for the session 350, which is transparent to most ofthe goings on between clinician 20* and the session management function53. For example, the conduct session process 84 transparently allows thesession management function 53 to implement a graphical user interface(GUI) that presents information and applications available for use byclinician 20* during the session 350. Of course, the actual display ofinformation on terminal 14* will continually be formatted by the displayformatting function 52 in accordance with the display capabilities ofterminal 14*.

During the session 350, clinician 20* may perform a variety ofactivities leading to any one of the following non-limiting examplescenarios A— through D—.

A—Provide Traditional Point-of-Care Services

Consider the case where clinician 20* is a physician and terminal 14* isa fixed-wire terminal near the bed of a particular patient. In thisscenario, the physician accesses one of the application functions 50,which allows the physician to retrieve information from, or addobservations and diagnostic information to, the electronic health record47 of the patient, order a certain treatment or test to be given to thepatient, use various application functions 50 such as decisioninformation support tools (DIST), etc.

B—Perform Location-Based Point-of-Care Functions

Consider the case where terminal 14* is a mobile terminal, such as aPDA, which has inferior display capabilities to those required for aparticular function (e.g., viewing X-ray images). In this scenario,clinician 20* accesses a location-based POC function (e.g., one of theapplication functions 50 in the POC server 30, or a separate function inthe controller 18) which informs clinician 20* of the nearest availableterminal having the required display capabilities.

Specifically, the indication provided by location-based POC function canbe based on knowledge of the particular communications link 57B and WLANaccess point 60 that the PDA (i.e., terminal 14*) is using tocommunicate with the POC server 30, thereby allowing a list of terminalsin the “coverage zone” of the WLAN access point 60 (or of a plurality ofWLAN access points) to be identified. Combined with knowledge at the POCserver 30 of which of the terminals in the list are available for use,the capabilities of these terminals and the display quality required bythe image to be viewed, this allows identification of the nearestavailable terminal having the required display capability. Let thisnearest available terminal be denoted 14+. As a possible option, thelocation-based POC function may allow clinician 20* to “reserve”terminal 14+ for a short period of time, say 2 minutes (to cover theestimated walking time of clinician 20* to reach terminal 14+).

C—Explicitly Terminate the Session

Consider the case where clinician 20* wishes to terminate the session350. In this scenario, clinician 20* interacts with the sessionmanagement function 53 to perform a log-off procedure to terminate thesession 350. For example, this can be effected by entering a log-offcommand at terminal 14*, e.g., by clicking on a log-out icon on thedisplay of terminal 14*. This command is detected by the sessionmanagement function 53 which, in response, sends a command to thedisplay formatting function 52, causing a change in the display ofterminal 14* (e.g., blank screen). In addition, the session managementfunction 53 deletes session-related information it may have stored (suchas pre-fetched information in the holding location 74).

D—Explicitly Suspend the Session

Consider the case where clinician 20* wishes to suspend the session 350for various reasons (e.g., snack break, migration to another terminal,etc.). In this scenario, clinician 20* interacts with the sessionmanagement function 53 to trigger a session suspend process to suspendthe session 350. For example, this can be effected by entering a suspendcommand at terminal 14*, e.g., by clicking on a suspend icon on thedisplay of terminal 14*. This command is detected by the sessionmanagement function 53 which, in response, sends a command to thedisplay formatting function 52, causing a change in the display ofterminal 14* (e.g., blank screen). However, the session managementfunction 53 does not delete session-related information, since thesession may be resumed by clinician 20* at a later time in a variety ofways.

If the session 350 remains suspended for a considerable length of time(e.g., beyond a certain threshold such as 10 minutes) without havingbeen resumed in one of the variety of ways alluded to above, then thesession suspend process in the session management function 53 mayautonomously terminate the session 350, which will result in deletion ofsession-related data such as the pre-fetched data in the holdinglocation 74.

Although it is transparent for most of the activities conducted duringthe session 350, the conduct session process 84 nevertheless continuesto monitor the information from the TDS 16 in order to detect certainconditions of clinician-terminal proximity and terminal-terminalproximity. Specifically, during the session 350, clinician 20* mayperform a variety of activities in addition to the above, which may leadto one of the following non-limiting example scenarios E— through G—.

E—Move Away from Terminal 14*

Consider the case where clinician 20* leaves the vicinity of terminal14* without having terminated or suspended the session 350. Onesituation in which this may occur is when clinician 20* has identified(or has been directed to) a nearby terminal with superior displaycapabilities (see B— above) and heads towards that terminal. Anothersituation in which this may occur is when clinician 20* simply forgetsto terminate or suspend the session 350.

In each of these and myriad other example scenarios, the conduct sessionprocess 84 will detect, using the data available from the TDS 16, thatclinician 20* is no longer within a certain distance of terminal 14*.More generally, clinician 20* can be said to satisfy a computed“remoteness condition”. However, it is not yet clear whether clinician20* did or did not intend to terminate the session. Thus, instead ofterminating the session immediately, the conduct session process 84causes the session to be suspended by causing the session managementfunction 53 to autonomously execute the session suspension process (seeD— above).

Clearly, the autonomous suspension of the session 350 based on deemingclinician 20* to have left the vicinity of terminal 14* reduces thepotential of confidential information being viewed at terminal 14* by apatient, passerby or unauthorized clinician, as well as reduces thepossibility of undesired access to the HIS 12 via terminal 14* withouthaving clinician 20* nearby. The overall effect is an increase in thesecurity of the HIS 12 and the information contained therein.

F—Appear in Proximity to a Terminal (with Previously Suspended Session)

Consider the case where the session 350 has been suspended as describedherein above (e.g., either by explicit action on the part of clinician20* or autonomously as a result of clinician 20* having left thevicinity of terminal 14*). In addition, clinician 20* approaches aterminal, denoted 14+, which may or may not be the same terminal 14* asthe one previously used by clinician 20* at the time the session 350 wassuspended. The conduct session process 84 will detect, using the dataavailable from the TDS 16, that clinician 20* is in proximity toterminal 14+. This triggers a session resumption process, now describedwith reference to FIG. 4.

At this stage, it is not yet known whether clinician 20* intends to useterminal 14+. Thus, the conduct session process 84 begins byestablishing the intent of clinician 20* to access the HIS 12 atterminal 14+. Specifically, at step 402, the conduct session process 84sends a command to the display formatting function 52, causing thelatter to display a greeting message on the display of terminal 14+.Since the session 350 is in a suspended state, the greeting message maybe adapted to reflect this fact. For instance, assuming that clinician20* is still presumed to be Dr. Jones, the greeting message displayed onthe display of terminal 14+ may be “Welcome Dr. Jones. Please confirmyour identity if you wish to resume your session at this terminal.”, orany conceivable variant thereof. It is noted that since the identity ofterminal 14+ is considered to be known a priori by the displayformatting function 52, its display capabilities will also be known. Ofcourse, if terminal 14+ is different from terminal 14*, its displaycapabilities may be different as well. This leads to the advantageoussituation where the information displayed to clinician 20* is tailoredto the terminal in use.

Meanwhile, or following execution of step 402, the controller proceedsto step 404, where a preliminary processing operation is caused to takeplace. In a non-limiting example of a preliminary processing operation,the conduct session process 84 causes a command to be sent to the datamining function 48 in the POC server 30, causing the latter to pre-fetchinformation from the clinician database 22, the patient database 24, thedepartmental database 26, the equipment database 35 and/or the externaldatabase 27. Now, it is recalled that the session 350 for clinician 20*has been suspended. Hence, portions of the preliminary processingoperation that would otherwise be required are not needed.

Specifically, in the case where clinician 20* is a physician, thepre-fetched information which is already in the holding location 74 dueto the session 350 having been previously established may include one ormore of the profile of the physician; access privileges of thephysician; a list of patients under the responsibility of the physician;and information (e.g., an electronic health record 47, or a portionthereof) related to one or more patients in the list of patients underthe responsibility of the physician. Thus, the preliminary processingoperation performed at step 404 can be limited to other informationspecifically related to terminal 14+. For example, this information mayrelate to one or more patients in proximity to terminal 14+. (Ifterminal 14+ is the same as terminal 14*, then even this last piece ofinformation does not need to be pre-fetched during execution of step404.)

The information that is pre-fetched by the data mining function 48during step 404 is added to the other information in the holdinglocation 74 that is accessible to the session management function 53 butas yet inaccessible to clinician 20*. More specifically, the pre-fetchedinformation will become available to clinician 20* once the session 350is resumed, but it is not yet appropriate to resume the session 350because (1) the intent of clinician 20* to use terminal 14+ is notknown; and (2) clinician 20* has not been authenticated (in thisexample, it has not yet been confirmed that the individual who ispresumed to be Dr. Jones by virtue of information received from the TDS16 really is Dr. Jones).

From this point on, the remainder of the steps performed by the conductsession process 84 are similar, although sometimes not identical, tosteps 306-320 described previously with reference to FIG. 3A. At step406, the conduct session process 84 continues to attempt to establishthe intent of clinician 20* to use terminal 14+ by waiting for inputfrom clinician 20* in response to the greeting message. At this point,two basic outcomes are possible. In the first outcome, clinician 20*ignores the greeting message. Accordingly, the conduct session process84 will detect an absence of a response for a predetermined amount oftime and will conclude that there is no intent by clinician 20* to useterminal 14+. This leads to execution of step 408, whereby a command issent to the display formatting function 52, causing the greeting messagedisappear from the display of terminal 14+. However, no command isissued to cause deletion of the pre-fetched information in the holdinglocation 74, since there is an underlying assumption that clinician 20*will eventually wish to resume the session 350, although perhaps not atterminal 14+. Rather, deletion of pre-fetched information related to thesuspended session 350 may occur for other reasons, such as the amount oftime during which the session 350 has been suspended (see D— above).

When clinician 20* does indeed respond to the greeting message in atimely manner, e.g., by pressing a key or touching the screen, this isinterpreted by the conduct session process 84 as an intent to useterminal 14+, and leads to step 412. Specifically, the conduct sessionprocess 84 causes a message to be sent the authentication entity 28,comprising the clinician identifier 38* of clinician 20*. Receipt of theclinician identifier 38* by the authentication entity 28 triggers theauthentication process 70 previously described with reference to FIGS.2A and 2B, which typically involves the submission of authenticationdata by clinician 20* (e.g., via a fingerprint reader). It should beunderstood that step 412 can be omitted if the submission ofauthentication data (e.g., touching the fingerprint reader) is itselfused to confirm one's intent to use terminal 14+.

In either case, at step 414, the conduct session process 84 receives anauthentication result from the authentication entity 28. If theauthentication result is a failure, then clinician 20* may be allowed tomake one or more additional attempts to authenticate himself or herselfin accordance with security policies in effect. However, if theauthentication result is a failure each time, then clinician 20* isdenied access to the information contained in the HIS 12, i.e. thesession 350 is not resumed. In fact, the conduct session process 84 maygo so far as to cause termination of the suspended session 350 byissuing a command at step 416. This command is detected by the sessionmanagement function 53 which, as previously described (see C— above),sends a command to the display formatting function 52, causing a changein the display of terminal 14* (e.g., blank screen) and deletessession-related information it may have stored (such as pre-fetchedinformation in the holding location 74).

On the other hand, the authentication result may be a success, whichleads to resumption of the session 350 for clinician 20*. Specifically,at step 420, the conduct session process 84 causes a message to be sentto the session management function 53 in the POC server 30, whichindicates to the session management function 53 that the cliniciandeemed to be at terminal 14+ should be permitted to regain access to thepre-fetched information in the holding location 74 as well as otherinformation in the HIS 12. The session management function 53 thenestablishes a new connection, this time between the HIS 12 and terminal14+, allowing clinician 20* to exchange information with the HIS 12 andperform the various other functions referred to above. The newconnection represents a resumed version of the once suspended session350, and is now supported by terminal 14+.

It will thus be appreciated that resumption of a session for clinician20* at terminal 14+ has been facilitated by (1) relying on pre-fetchedinformation in anticipation of the clinician's intent to use terminal14+, thereby reducing the real-time computational load of the POC server30 and other elements of the HIS 12; and (2) simplifying the re-log-inprocedure for clinician 20* to a “confirmation of identity” procedure,whereby clinician 20* is simply required to provide data for his or herauthentication; this can advantageously be done by touching afingerprint reader on his or her badge.

G—Appear in Proximity to a New Terminal 14+, Accompanied by Terminal 14*(which Continues to Support an Ongoing Session)

With reference to FIG. 5A, consider the case where clinician 20*approaches a new terminal, denoted 14+, while a session 550 is ongoingbetween the HIS 12 and terminal 14*. One situation in which this mayoccur is when clinician 20* is a physician communicating with the HIS 12through the physician's PDA (in this case terminal 14* which supportsthe session 550) and the physician wishes to view certain information ona fixed terminal with advanced display capabilities (in this caseterminal 14+ which is being approached). Of course, it should beunderstood that the following description also applies to the case wherethe terminal being approached (i.e., terminal 14+) is a mobile terminal.

Based on data available from the TDS 16, the conduct session process 84detects that terminal 14* is in proximity to terminal 14+. This causesthe conduct session process 84 to trigger a live session transferprocess, now described with reference to the flowchart in FIG. 5B.Specifically, at step 502, the conduct session process 84 causes acommand to be sent to the display formatting function 52, which causingthe latter to display a greeting message on the display of terminal 14+for clinician 20*. For instance, assuming that clinician 20* is Dr.Jones, the greeting message displayed on the display of terminal 14+ maybe “Welcome Dr. Jones. Please confirm your desire to transfer yoursession to this terminal.”, or any conceivable variant thereof. It isnoted that since the identity of terminal 14+ is known to the displayformatting function 52, its display capabilities will also be known.

Meanwhile or following execution of step 502, the conduct sessionprocess 84 executes step 504, whereby a preliminary processing operationis performed. In a non-limiting example of a preliminary processingoperation, the conduct session process 84 causes a command to be sent tothe data mining function 48 in the POC server 30, causing the latter topre-fetch information from the clinician database 22, the patientdatabase 24, the departmental database 26, the equipment database 35and/or the external database 27. However, it is recalled that thesession 550 for Dr. Jones is ongoing between the HIS 12 and terminal14*. Therefore, certain elements of the preliminary processing operationthat would otherwise be required are not needed.

For example, where clinician 20* is a physician, the information whichis already in the holding location 74 by virtue of prior establishmentof the session 550 includes one or more of: the profile of thephysician, access privileges of the physician, a list of patients underthe responsibility of the physician, and information (e.g., anelectronic health record 47, or a portion thereof) related to one ormore patients in the list of patients under the responsibility of thephysician. Thus, the preliminary processing operation performed at step504 can be limited to pre-fetching additional information specificallyrelated to terminal 14+, such as information relating to the patientsthat may find themselves near terminal 14+.

Generally speaking, at this stage, the information in the holdinglocation 74 pertains to two terminals that are related to one another bya common clinician 20* and a common session 550. One of these terminalsis the one with which clinician 20* had an ongoing session beforeapproaching the other. Thus, one of these terminals can have the statusof a “session transferor” and the other can have the status of a“session transferee”. In this example, terminal 14* is the sessiontransferor and terminal 14+ is the session transferee. Moreover, each ofthe terminals is associated with a session page delivery indicator thatindicates which “pages” of the session 550 are currently being supportedby that terminal. At this stage in the live session transfer process,the session transferor supports the entirety of the session 550 and thesession transferee does not yet support any of the session 550.

In order to help keep track of which terminal is the session transferorand which terminal is the session transferee for a variety of sessions,the controller 18 may store a table 85 that is accessible to the conductsession process 84. The table 85, which can be stored in the controller18 or elsewhere, may resemble the following (for the as yetuntransferred session 550). Note that terminal 14+ does not yet have theknowledge that it is about to have certain pages of the session 550transferred to it:

Terminal Session Status Pages 14* 550 Transferor All 14+ N/A N/A None

Next, the conduct session process 84 proceeds to establish the intent ofclinician 20* to transfer at least a portion (e.g., certain pages) ofthe session 550 from terminal 14* (the session transferor) to terminal14+ (the session transferee). Thus, at step 506, the conduct sessionprocess 84 waits for input from clinician 20* in response to thegreeting message. At this point, two basic outcomes are possible. In thefirst outcome, clinician 20* ignores the greeting message. Accordingly,the conduct session process 84 will detect an absence of a response fora predetermined amount of time and will conclude that there is no intentby clinician 20* to transfer any pages of the session 550 to terminal14+. This leads to execution of step 508, whereby a command is sent tothe display formatting function 52, causing the greeting messagedisappear from terminal 14+. However, no command is issued to causedeletion of the pre-fetched information in the holding location 74,since the session 550 is still ongoing between clinician 20* andterminal 14*. Thus, operation of terminal 14* (the session transferor)remains unaffected.

In the other possible outcome, clinician 20* responds to the greetingmessage in a timely manner to signal an intent to transfer at least aportion (e.g., some pages) of the session 550 to terminal 14+ or toresume a given session at a given point or page. This can occur in thevarious ways previously described, such as a pressing a key or touchingthe screen of terminal 14+.

In addition, the response provided by clinician 20* may indicate thepages of the session 550 that are to be transferred (e.g., the entiresession, only visualization of images, etc.) to the session transferee.Alternatively, the portion of the session 350 to be transferred toterminal 14+ may be established by the application context. For example,if clinician 20* has requested an X-ray image on his/her PDA (terminal14*) and the application has noted the unsuitability of the PDA displayand has directed clinician 20* to a terminal that does have a suitabledisplay, then the application can remain in control of displaying theX-ray image on the high quality terminal (terminal 14+), once clinician20* is authenticated as being at that terminal.

Another way in which clinician 20* can signal an intent to transfer atleast a portion of the session 550 to terminal 14+ is by bringingterminal 14* closer to terminal 14+ than what initially caused theconduct session process 84 to deem that terminal 14* was “in proximity”to terminal 14+. Generally, this can be referred to causing terminal 14*to satisfy a computed “terminal proximity condition” with respect toterminal 14+. The terminal proximity condition may be defined by adifferent distance-time relationship than the “proximity condition”defined earlier. Of course, it is within the scope of the presentinvention to further refine the definition of the terminal proximitycondition using additional factors. For instance, such additionalfactors may include the type of terminal 14* and the type of terminal14+.

The conduct session process 84 therefore monitors the data availablefrom the TDS 16 to detect whether terminal 14* has indeed satisfied theterminal proximity condition relative to terminal 14+. If this is thecase, then the conduct session process 84 concludes that clinician 20*intends to transfer at least a portion of the session 550 to terminal14+. Whether the session is fully or partly transferred is a designconsideration, and may further be made selectable (e.g., by requiringuser input via a keyboard or by requiring that terminal 14* be moved soas to satisfy a computed “terminal remoteness condition” and then movedagain to satisfy the terminal proximity condition within a predeterminedamount of time, such as 5 seconds, etc.).

Yet another way in which clinician 20* can signal an intent to transferat least a portion of the session 550 to terminal 14+ is by submittingbiometric data (e.g., the transmittal of which is triggered by touchinga fingerprint reader on a badge) in the absence of a request forauthentication.

Whether the session 550 is fully or partly transferred is a designconsideration, and may further be made selectable (e.g., by requiringuser input via a keyboard or by requiring that biometric data beresubmitted several times in a given sequence). Alternatively, the pagesto be transferred may be established by the session application function50. In either case, the conduct session process 84 learns of a desiredportion of the session 550 to be transferred from the session transferorto the session transferee.

Once the intent of clinician 20* to transfer certain desired pages thesession from terminal 14* to terminal 14+ has been confirmed, theconduct session process 84 proceeds transfer the desired portion of thesession 550 for clinician 20* from terminal 14* to terminal 14+.Specifically, the conduct session process 84 causes a message to be sentto the session management function 53 in the POC server 30, therebyindicating to the session management function 53 which portion of thesession 550 is now to be conducted with terminal 14+ and which portionis no longer to be conducted by terminal 14+.

Meanwhile, terminal 14* of course remains the “session transferor” andterminal 14+ remains the “session transferee”. However, the session pagedelivery indicator for these two terminals will change under the controlof the session management function 53. This change is reflected in thetable 85 stored in the controller 18, which may now resemble thefollowing:

Terminal Session Status Pages 14* 550 Transferor All except pages A . .. N 14+ 550 Transferee A . . . N

Thus, with reference to FIG. 5C, the session 550, which previouslyexisted only between the HIS 12 and terminal 14*, now exists eitherbetween the HIS 12 and terminal 14+ alone, or has a first portion thatexists between the HIS 12 and terminal 14+ in addition to a remainingportion that exists between the HIS 12 and terminal 14*.

Clinician 20* can then perform a number of tasks during the session 550while using terminal 14+ (and possibly also terminal 14*). Moreover,clinician 20* may continue conducting the session 550 with terminal 14+as long as necessary, after which point there are a number ofpossibilities, each of which is now discussed.

First Possibility (Explicit Transfer of Session)

Under a first possibility, with reference to FIG. 5D, clinician 20*explicitly signals an intent to transfer the session 550 back toterminal 14*. For example, clinician 20* may click on an appropriate“transfer back” icon on the display of terminal 14+ (or terminal 14*).Alternatively, clinician 20* will cause terminal 14* to re-satisfy the“terminal proximity condition” (with respect to terminal 14+). In eithercase, an intent to transfer the session 550 back to the sessiontransferor, i.e., terminal 14*, has been signaled by clinician 20*.

Clinician 20*'s intent to transfer the session 550 is detected by theconduct session process 84, which causes a message to be sent to thesession management function 53 in the POC server 30, indicating to thesession management function 53 that the session 550 is no longer to beconducted with terminal 14+. In response, the session managementfunction 53 sends a command to the display formatting function 52,causing a change in the display of terminal 14+ (e.g., blank screen).However, the session management function 53 does not deletesession-related information, since the session 550 continues to beconducted with terminal 14*.

In addition, the session page delivery indicator for terminal 14* andterminal 14+ will change under the control of the session managementfunction 53. This change is reflected in the table 85 stored in thecontroller 18, which may now resemble the following:

Terminal Session Status Pages 14* 550 Transferor All 14+ 550 TransfereeNone

As long as clinician 20* and terminal 14* remain in proximity toterminal 14+, the session 550 can continue to be transferred back andforth between the two terminals as described above. If the session 550is explicitly transferred back to terminal 14*, and clinician 20* thenmoves away from terminal 14+, this is detected by the conduct sessionprocess 84. The conduct session process 84 then informs the sessionmanagement function 53, which modifies the above to indicate thatterminal 14+ has lost its status as “session transferee” for the session550. At this point, terminal 14+ will be treated like any other terminalin the communications network 10.

Second Possibility (Mobility Scenario I)

Under a second possibility, with reference to FIG. 5E, clinician 20*takes terminal 14* and moves away from terminal 14+ without havingexplicitly transferred the session 550 back to terminal 14* before hisor her departure from terminal 14+. In other words, clinician 20*remains in proximity to terminal 14* but not in proximity to terminal14+. This is detected by the conduct session process 84 as satisfactionof a computed “terminal remoteness condition”. The conduct sessionprocess 84 then takes the necessary actions to autonomously effect atransfer the session 550 back to terminal 14*. This can be referred to,from the session 550's point of view, as “snapping back” to the sessiontransferor (i.e., terminal 14*).

Specifically, the conduct session process 84 causes a message to be sentto the session management function 53 in the POC server 30, indicatingto the session management function 53 that the session 550 is no longerto be conducted with terminal 14+. In response, the session managementfunction 53 sends a command to the display formatting function 52,causing a change in the display of terminal 14+ (e.g., blank screen).This eliminates the risk of displaying sensitive data on the display ofterminal 14+. However, the session management function 53 does notdelete session-related information from the holding location 74, sincethe session 550 continues to be conducted with terminal 14*.

In addition, the session management function 53 modifies theaforementioned table 85 to indicate that terminal 14+ has lost itsstatus as “session transferee” for the session 550, and also modifiesthe table 85 to indicate that the full session is supported by terminal14*. From this point, terminal 14+ is treated like any other terminal inthe communications network 10.

Third Possibility (Mobility Scenario II)

The third possibility is similar to the second possibility, in thatclinician 20* moves away from terminal 14+ without having explicitlytransferred the session 550 back to terminal 14* before his or herdeparture from terminal 14+. However, in this case and with reference toFIG. 5F, clinician 20* is unaccompanied by terminal 14*. In other words,clinician 20* remains is no longer in proximity to either terminal 14*or terminal 14+. This is detected by the conduct session process 84,which then takes the necessary actions to transfer the session 550 backto the session transferor, but to immediately follow by suspending thesession 550.

Specifically, the conduct session process 84 causes a message to be sentto the session management function 53 in the POC server 30, indicatingto the session management function 53 that the session 550 is no longerto be conducted with terminal 14+. In response, the session managementfunction 53 sends a command to the display formatting function 52,causing a change in the display of terminal 14+ (e.g., blank screen).This eliminates the risk of displaying sensitive data on the display ofterminal 14+. Accordingly, the session management function 53 modifiesthe aforementioned table 85 to indicate that terminal 14+ has lost itsstatus as “session transferee” for the session 550, and also modifiesthe table 85 to indicate that the full session is supported by terminal14*. From this point, terminal 14+ is treated like any other terminal inthe communications network 10.

In addition, the conduct session process 84 suspends the session 550 byautonomously executing the session suspend process for terminal 14* (seeE— above), since clinician 20* is deemed to have moved away fromterminal 14*.

Fourth Possibility (Mobility Scenario III)

Under a second possibility, with reference to FIG. 5G, terminal 14*(which is the session transferor for the session 550) leaves thevicinity of both clinician 20* and terminal 14+. Such a scenario mayarise if clinician 20*'s PDA is lent to a co-worker or is carried awaywhile clinician 20* is viewing a large-screen display on terminal 14+(the session transferee).

It is noted that this scenario actually amounts to the equivalent ofclinician 20* moving away from terminal 14* and satisfying a remotenesscondition, which is covered by E— above. Specifically, in accordancewith E— above, the conduct session process 84 would send a message tothe session management function 53, causing the latter to execute thesession suspend process for terminal 14*. Additionally, in view of F—above, because clinician 20* is still in proximity to terminal 14+,clinician 20* would then immediately be asked if he or she wishes toresume the now suspended session at terminal 14+ (see F— above).

Now, although the above actions have the desirable effect of preventinga security breach from arising, there may be a disruption to theactivities taking place at terminal 14+. To avoid such a disruption, anadditional layer of complexity may be added to E— and F— above.Specifically, instead of suspending the session 550 and then askingclinician 20* if he or she wishes to resume the session 550, the session550 can simply be transferred to terminal 14+, provided that terminal14+ is the session transferee for the session 550 (which, in this case,it is).

2. Second System Architecture

In the first system architecture, advantageous use was made of theknowledge that individual clinicians and mobile terminals were inproximity to individual fixed-wire of mobile terminals. This enabledvarious functions related to establishment and management of sessionswith the HIS 12. The second system architecture enables these samefunctions, in addition to a variety of other functions that makeadvantageous use of the position (or location) of individually “tagged”clinicians and equipment (e.g., terminals or medical devices) within anoverall “location-awareness area” in the hospital.

These include:

-   -   communication with clinicians based depending on their deemed        availability;    -   assembling a team of clinicians in response to a medical        emergency occurring at a given location in the hospital;    -   tracking of equipment associated with individual clinicians to        detect suspicious movement of such equipment;    -   preventative control of communications devices when found to be        in proximity of sensitive medical devices.

The second system architecture differs from the first one in that:

-   -   an array of detectors is established across the entire        location-awareness area, which may be the overall campus or a        significant portion thereof; and    -   the absolute location of tagged clinicians and equipment (e.g.,        terminals and medical devices) is detected, calculated and        tracked.

From the location and tracking of absolute coordinates of tags, relativeto the building spatial grid, the distance between two tag-bearingpeople or pieces of equipment can be calculated and from a history ofthese distance calculations, it can be determined whether a givenproximity or remoteness constraint is satisfied.

Accordingly, FIGS. 6A and 6B (which should be considered overlaid ontoone another) show a conceptual view of a communications network 610 of ahealthcare establishment, in accordance with a second example ofimplementation of the present invention. Again, for ease of reading, thehealthcare establishment will hereinafter be referred to as a hospital,but it should be understood that the healthcare establishment may be ofany size and may generally consist of a single building or a campusincluding one or more buildings or pavilions and possibly one or moreadjacent areas such as roads and parking lots.

A plurality of fixed terminals 14A and a plurality of mobile terminals14B serve as entry points to the communications network 610. Theterminals 14A, 14B are accessed by a plurality of clinicians 20 who aremobile within the hospital. The term “clinician” is used to denote anyindividual who may require access to the communications network 10 inthe execution of their duties pertaining to diagnosis and/or treatmentof one or more patient. While not intended to be an exhaustive list,typically clinicians 20 can include physicians, radiologists,pharmacists, interns, nurses, laboratory technicians and orderlies. Ineither case, when interpreting the present invention, the word“clinician” should not be construed as limiting the invention toapplicability in an environment where individuals are required to havespecific medical qualifications.

The communications network 610 also includes a tag/detector subsystem(TDS) 616 connected to a controller 618, which is connected to ahealthcare information system (HIS) 12 and a communications system headend 650. In a non-limiting example of implementation, shown in andpreviously described with reference to FIG. 1C, the HIS 12 includes aclinician database 22, a patient database 24, a departmental database26, an equipment database 35, as well as an authentication entity 28 anda point-of-care (POC) server 30. In addition, the HIS 12 may permitaccess to a trusted external database 27, for instance a nationalelectronic health record (EHR) database, via a secure link 29.

Some of the aforementioned components of the communications network 10will now be described in greater detail. However, a description of theclinician database 22, the patient database 24, the departmentaldatabase 26, the equipment database 35, the authentication entity 28 andthe point-of-care (POC) server 30 is omitted, since these componentshave already been described with reference to FIG. 1C, and anyvariations or modifications required to support the second systemarchitecture will be readily understood and easily implemented by aperson of ordinary skill in the art.

Terminals 14A, 14B

The terminals 14A, 14B allow communication between the clinicians 20 andthe HIS 12 via the controller 618. Terminals 14A are fixed-wireterminals, such as stationary terminals or workstations, connected tothe controller 618 via communication links 57A. Terminals 14B are mobileterminals, such as handheld units (e.g., personal digital assistant(PDA)) or laptop computers, which communicate with the controller 18 viacommunication links 57B that include wireless portions. The wirelessportions of the communication links 57B are secure links that may beencapsulated within the communications network 610, as would be the casefor a wireless local area network (WLAN) using WLAN access points 60. Inanother embodiment, the wireless portions of the communication links 57Bmay involve an external network connection, as would be the case whenthe mobile terminals 14B are cellular phones or cellular data devices.

Each of the terminals 14A, 14B has a display capability, which may bedifferent for different types of terminals. For example, mobileterminals 14B may have inferior display capabilities, while certain onesof the fixed-wire terminals 14A may have superior display capabilities.

Medical Devices 602

A plurality of medical devices 602 is also collectively shown in FIGS.6A and 6B. A medical device refers to a piece of healthcare equipmentused for a particular purpose in the hospital. Examples of medicaldevices 602 include but are not limited to surgical instruments,wheelchairs, emergency resuscitation carts (colloquially referred to as“crash carts”), life-support units, computerized axial tomography (CAT)or magnetic resonance imaging (MRI) scanners, and any other conceivablepiece of equipment, either mobile or stationary, normally found in ahealthcare environment.

It will be noted that a first subset of the medical devices 602 isconnected to the communications network 610, and these are shown in FIG.6A. Non-limiting examples of medical devices that may be members of thefirst subset include devices that are used to input data into the HIS 12or extract data from the HIS 12, for example CAT scanners and MRIscanners. Stationary medical devices in the first subset may beconnected to the communications network 610 via the communication links57A, while mobile medical devices in the first subset may be connectedto the communications network 610 by communication links 57B.

Aspects of operation of the medical devices 602 in the first subset(i.e., connected to the communications network 610) can be controlled bythe controller 618. One example of operation that can be controlledwould be authorization/authentication to use a particular medicaldevice, this being limited to only those operatives trained in so-doing.This would be achieved by only allowing the medical device to befunctional while a qualified, authorized, authenticated operator isfound to be in its vicinity. Another example of an aspect of operationis an on/off state of the medical device 602.

A second subset of the medical devices 602 is not connected to thecommunications network 610 because there is no need to exchange databetween these devices and the HIS 12. Such medical devices may bereferred to as “passive” from the communications standpoint and,although not illustrated in FIG. 6A, they are represented in FIG. 6B. Byway of non-limiting example, wheelchairs and stretchers may be membersof the second subset of the medical devices 602. However, it isenvisaged that certain other conventionally “passive” devices may beequipped with communication functionality and therefore whether aparticular medical device belongs to the first subset or the secondsubset might depend on factors other than simply the nature ofparticular medical device.

Communications System Head End 650.

Although clinicians 20 may communicate with one another using mobileterminals 14B, the communications network 610 may further provide theability to use a more conventional communications system. To this end,the communications system head end 650 enables telephony-style or othercommunication between individuals in the hospital or external to thehospital, including the clinicians 20. In one embodiment, thecommunication system head end 650 may comprise a switch and processingequipment, and may be connected to an intercom system and speakersdistributed throughout the hospital for communicating with individualsor group of individuals in the hospital. Optionally, the communicationsystem head end 650 may be connected to a plurality of communicationdevices 614 via a plurality of paths 57C (fixed or partly wireless).Non-limiting examples of the communication devices 614 include pagersand WLAN phones. The communication devices 614 are typically carried bythe clinicians 20, allowing telephony-style communications to beestablished with specific individuals in the hospital. Thecommunications system head end 650 could also comprise a PBX connectedto fixed and wireless telephones, with the location of the fixedtelephones being known a priori.

Tag/Detector Subsystem (TDS) 616.

With specific reference now to FIG. 6B, the TDS 616 includes a pluralityof tags 36A, 36B, 36C, 36D, a plurality of contact-less tag detectors654 and a location calculation engine (LCE) 658, which may be integratedwith the controller 618 or separate therefrom. The tags 36A, 36B, 36Cand 36D are associated with the various people and equipment whoselocation needs to be ascertained. In this case, as before, tags 36A arerespectively associated with the clinicians 20 and tags 36B arerespectively associated with the mobile terminals 14B. In addition, tags36C are respectively associated with the medical devices 602 in both thefirst and second subsets, while tags 36D are respectively associatedwith the fixed-wire terminals 14A.

Similarly to what was described with reference to the first systemarchitecture, a given tag 36A, 36B, 36C, 36D operates in such a way asto provide a brief radio frequency signal that encodes an identifier ofthe given tag 36A, 36B, 36C, 36D, hereinafter referred to as a “tag ID”58. Without being interpreted as a limitation of the present invention,the tags 36A, 36B, 36C, 36D can be active (i.e. the tag frequently orperiodically emits a signal), semi-active (i.e. the tag emits a signalonly in response to receiving another signal), or passive (i.e. the tagonly reflects a received signal). The decision to select active,semi-active or passive tags depends on various factors such as therequired range, precision, and power consumption/battery lifetime/weightconsiderations.

In the selection of a suitable tag technology, care should also be takento ensure that the tags, which are themselves transmitters of RF energy,do not interfere with sensitive medical equipment, e.g., certain ones ofthe medical devices 602. In a non-limiting example, the use of alow-power multi-GHz center-frequency Ultra Wideband (UWB) solution,which operates with RF bursts of 1 nanosecond duration at a peak powerof 15-30 mW (giving an average power of nanowatts or picowatts), meetsthis requirement.

It is noted that the information contained in the tag IDs 58 is uniquefor the various tags 36A, 36B, 36C, 36D. Assuming that there is aone-to-one physical association between the clinicians 20 and the tags36A, then the tag ID 58 for the tag 36A attached to a given clinician 20can contain the clinician identifier 38 of the given clinician 20.(Alternatively, if the clinician identifier 38 needs to be keptconfidential, then the tag ID 58 can contain the clinician -specific tagID 42 for the given clinician 20.) Similarly, if there is a one-to-onephysical association between the mobile terminals 14B, medical devices602 and fixed-wire terminals 14A on the one hand, and the tags 36B, 36Cand 36D on the other, then the tag ID 58 for the tag attached to a givenone of these pieces of equipment can contain a serial number or MACaddress of the given piece of equipment.

The detectors 654 are distributed throughout the hospital rather thanbeing collocated with the fixed-wire terminals 14A. The detectors 654are positioned at known locations and may take the form of a grid or anarray. Specifically, the locations of the detectors 654 may be kept in adatabase 662 in the location calculation engine (LCE) 658. In addition,the detectors 654 may span multiple floors of a common building, thuseffectively being distributed in three dimensions. Also, the detectors654 may be vertically separated on a given floor, thereby giving animproved capability for z-axis spatial resolution within that floor.

Depending on the type of tag used, each of the detectors 654 may includeeither a receiver for receiving radio frequency signals emitted byactive tags, or both a transmitter for emitting radio frequency pulsesand a receiver for receiving radio frequency signals emitted (orreflected) by semi-active (or passive) tags in response to the emittedradio frequency pulses.

Each of the detectors 654 detects tags in a surroundingthree-dimensional volume which is a “coverage zone” for that detector654. The union of the coverage zones for all of the detectors 654defines a location-awareness area of the hospital. If a given tag islocated within the location-awareness area of the hospital, then the tagID 58 that the given tag emits (or reflects) will be detectable by atleast one of the detectors 654. The fact that the location of thedetectors 654 is known is sufficient to give an approximate idea as towhere a detected tag is located within the location-awareness area ofthe hospital; however, it is insufficient to provide a precise estimateof the location of that tag. Thus, the second system architectureutilizes the LCE 658 to provide the precision required in estimating thelocation of individual tags in the location-awareness area of thehospital.

For example, assume that the desired precision in the relative locationbetween a clinician 20 and a piece of equipment (e.g., terminal 14A,terminal 14B, medical device 602), or between two pieces of equipment,is on of the order of ±10-25 cm. Thus, approximately twice thisprecision (i.e., ±5-12.5 cm) on the absolute measurements is required,assuming that errors occur randomly. The required precision can beachieved by use of high resolution ultra-wideband radio-frequencytransmitting tags, which emit sub-nanosecond bursts of radio frequency.Alternatively, the required precision can be achieved by use ofultrasonic acoustic tags which emit sub-millisecond bursts of acousticenergy, since the propagation length of both a 1 ns electromagneticburst and a 1 millisecond acoustic burst is of the order of 1 foot,limiting the spatial resolution to around this level, depending uponexactly how the signal is received and measured.

One possible way to achieve adequate spatial resolution on the basis oftime measurements is now described. Specifically, the LCE 658 maintainsan absolute system time reference, which it distributes to the detectors654. With reference to FIG. 7, when a burst 702 corresponding to aparticular tag (denoted 36*) having a particular tag ID (denoted 58*) isreceived at a particular detector (denoted 654 ₁), the particulardetector 654 ₁ measures the absolute system time T₁ at which the burst702 was received. In addition, other detectors (in this case threedetectors denoted 654 ₂, 654 ₃, 654 ₄) also receive the same burst 702,possibly at different times. Upon receipt of the burst 702, each of thedetectors 6541, 6542, 6543, 6544 sends to the LCE 658 the detected tagID 58* and the absolute system time T₁, T₂, T₃, T₄ at which the burst702 was received.

At the LCE 658, the received times T₁, T₂, T₃, T₄ can be compared tocalculate the differences in time of flight to each of at least 3 of thedetectors 654 ₁, 654 ₂, 654 ₃, 654 ₄. These differences can then be usedto estimate the position of the tag 36* in two- or three-dimensionalspace, since the detectors' locations are known a priori from theinstallation grid and are available by consulting the database 662 inthe LCE 658.

In an alternative embodiment, rather than use an absolute system timereference, one can measure received signal direction from multipledetectors. To render such an embodiment capable of achieving therequired precision, one should consider enhancements such as the use ofa large array of large antennas, a very high (˜30-40 GHz) radiofrequency combined with smaller directional antennas, a directionaland/or time difference-measuring optical pulse, or other technologies,such as acoustic, infrared, ultrasonic, etc.

Of course, the greater the number of detectors used, the greater thenumber of detectors that will receive a given burst 702 and thus, themore accurate the position estimate will be. For example, while atwo-dimensional position estimate of the particular tag 36* requires aminimum of three detectors to detect the tag ID 58*, it may be desirableto use the data from four detectors that receive the tag ID 58*. Thiswill allow for “occlusion” of one detector; alternatively, it allows theuse of four sets of three measurements to produce four positionestimates, each of which will contain errors. The overall error can bereduced by combining these in various ways including “least squares fit”as well as other methods. In this context, “occlusion” means that nouseful signal reaches the detector, and exemplifies an environment whereultra-wideband (UWB) solutions are significantly more robust thanoptical or acoustic ones.

In addition, a position estimate can be obtained by integrating theresults from multiple bursts. This will lead to an increased locationprecision for static and slow-moving tag-bearing people or pieces ofequipment, but a velocity-related lag in computing the location offast-moving tag bearers. The effects are dependent upon the pulserepetition rate, the number of pulses over which location data isintegrated, the velocity of the tag bearer and the required precision inthe location measurement.

Similarly, to achieve a three-dimensional position estimate, onetheoretically requires only four measurements, but such a measurement isrendered difficult and error-prone due to a small vertical baseline(Z-axis) allowed by floor-ceiling distance triangulation in the verticalaxis. Thus, it may be preferable to use multiple measurements and reduceerror though processing operations. For example, it may be advantageousto collect the data from six (6) detectors, allowing 30 sets of positionestimates to be made without receiver occlusion, or 5 sets of positionestimates to be made with one receiver being occluded.

To summarize the above, the detectors 654 ₁, 654 ₂, 654 ₃, 654 ₄ receivethe burst 702 from the nearby tag 36*, detect the tag ID 58* in thereceived burst 702 and communicate the tag ID 58* to the LCE 658 along aset of communication links 656. Along with the tag ID 58*, the detectors654 provide the absolute system time T₁, T₂, T₃, T₄ at which the burst702 was received (or, on the other hand, the direction from which theindividual tag ID 58* is detected). Based on this information and onknowledge of the positions of the detectors 654 ₁, 654 ₂, 654 ₃, 654 ₄within the location-awareness area of the hospital, the LCE 658 thendetermines the estimated position of the tag 36* within the hospital.The tag ID 58* and the estimated position of the corresponding tag 36*(generally: tags 36A, 36B, 36C, 36D) are provided to the controller 618,which will now be described in greater detail.

Controller 618

The controller 618 comprises suitable software, hardware and/or controllogic for implementing a variety of “monitoring processes” that operatein the background until they detect that a certain trigger condition issatisfied, whereupon further processing operations are performed. Asshown in FIG. 8, these include a clinician proximity monitoring process810, a tagged equipment monitoring process 820, a communicationsmonitoring process 830, a medical event monitoring process 840 and an RFinterference monitoring process 850. The monitoring processes 810-850may all run in parallel to one another. Each of the aforementionedmonitoring processes is now described in greater detail.

I—Clinician Proximity Monitoring Process 810

Similar to the clinician proximity monitoring process 80 describedearlier, the clinician proximity monitoring process 810 monitors theoutput of the TDS 616 to decide when clinicians 20 who do not havesessions are found to be in proximity to individual ones of theterminals 14A, 14B. The definition of “in proximity” may vary inaccordance with operational requirements. In one embodiment, a givenclinician of interest (denoted 20*) is deemed to be “in proximity” to agiven terminal of interest (denoted 14*) when a computed “proximitycondition” is satisfied, e.g., when the relative distance between theestimated position of the tag 36A associated with clinician 20* and theestimated position of the detector 34A, 34B associated with terminal 14*remains less than a certain threshold distance, continuously, for atleast the duration of a time window.

Of course, it is within the scope of the present invention to furtherrefine the definition of the proximity condition using additionalfactors. For instance, such additional factors may include the identityor professional role of clinician 20*. Another example of such anadditional factor includes an indication of whether terminal 14* is inclinician 20*'s “field of view”. In one embodiment, determining whetherterminal 14* is within clinician 20*'s field of view may involveprocessing the intensity of the signal received from the tag associatedwith clinician 20*. Based upon the estimated position of clinician 20*,relative to the nearby detectors 654 and hence the known free space pathlength from clinician 20* to those detectors, the expected receivedpowers at the various detectors 654 can be computed. Any differencesfrom those powers, such as a significant power level drop in one or twodetectors, can be attributed to absorption of the signal by the body ofclinician 20*, which allows the direction in which clinician 20* isfacing to be inferred.

In other words, a lower-intensity signal may indicate that clinician20*'s body is in the way and hence it is possible to infer in whichdirection clinician 20* is facing and determine whether terminal 14* isin clinician 20*'s field of view. In another embodiment, the controller618 computes a velocity vector of clinician 20* by tracking the locationof clinician 20* over time. By taking into account a certain angle onboth sides of the velocity vector, and assuming that clinician 20* ismoving in the direction that he or she faces, the controller 618 canobtain a field of view of clinician 20* and determine whether terminal14* is in that field of view. Furthermore, the computed velocity ofclinician 20* may allow for a determination of intent, in that ifclinician 20* who intends to use terminal 14* will approach it and slowdown (and eventually stop), whereas clinician 20* who does not intend touse terminal 14* will likely remain at a high walking speed.

Thus, it will be appreciated that consideration of clinician 20*'s fieldof view may be advantageous in order to take into account situationswherein clinician 20*, although “close” to terminal 14*, is oriented insuch a way that he or she cannot interact with terminal 14*. (Forinstance, clinician 20* has his or her back facing terminal 14*.) Thus,the proximity condition may be satisfied not only when clinician 20* is“close” to terminal 14*, but when terminal 14* is within clinician 20*'s“field of view”.

Once the clinician proximity monitoring process 810 has deemed clinician20* to be in proximity to terminal 14* (i.e., the proximity condition issatisfied), the controller 618 executes a “session establishment”process, which is similar to the session establishment process 82previously described with reference to FIGS. 3B and 3C. This results inthe establishment of a session for clinician 20* between terminal 14*and the HIS 12.

Once the session is established, the controller 618 enters a “conductsession” process for the session, which is similar to the conductsession process 84 previously described. During the session, clinician20* may perform a variety of activities leading to any one of thepreviously described non-limiting example scenarios A— through D—. Inaddition, although it is transparent for most of the activitiesconducted during the session, the conduct session process neverthelesscontinues to monitor the information from the TDS 616 in order to detectcertain conditions of clinician-terminal proximity and terminal-terminalproximity. Specifically, during the session, clinician 20* may perform avariety of activities in addition to the above, which may lead to one ofthe previously described non-limiting example scenarios E— through G—.

In the specific case of scenario G— and mobility scenario III relatedthereto, it is recalled that this scenario covered the case whereclinician 20* had approached a new terminal, denoted 14+, while asession was ongoing between the HIS 12 and terminal 14*. This wasfollowed by terminal 14* leaving the vicinity of both clinician 20* andterminal 14+. It is recalled that such a scenario may arise if clinician20*'s PDA is lent to a co-worker or is carried away while clinician 20*is viewing a large-screen display on terminal 14+ (the sessiontransferee). If the PDA is being lent to colleague, then there may notbe cause for concern. However, if the PDA has been stolen, then it maybe desirable to detect this action so that the appropriate measures canbe taken. Specifically, potentially suspicious motion of taggedequipment in this and other scenarios is handled by the tagged equipmentmonitoring process, as now described.

II—Tagged Equipment Monitoring Process 820

In order to support the tagged equipment monitoring process 820, theequipment database 35 is expanded so as to include additional fields foreach piece of tagged equipment (e.g., terminal or medical device),including but not limited to valuable mobile equipment, such as PDAs andtablet PCs. Specifically, with reference to FIG. 11, an enhancedequipment database 1135 includes the same fields as the equipmentdatabase 35 in FIG. 1D, in addition to an “authorized users” field 1110and a “physical boundaries” field 1112.

For a given piece of tagged equipment, the authorized users field 1110provides a list of clinicians who have the authorization to use thegiven piece of tagged equipment. The clinicians in this list can beidentified by their clinician ID 38 or clinician-specific tag ID 42, forexample, or by any other conceivable identifier. The list of clinicianswho have the authorization to use a given piece of tagged equipment maychange over time and may be under the control of hospitaladministration.

For a given piece of tagged equipment, the physical boundaries field1112, which is optional, may indicate specific areas of the hospitalwhere the given piece of tagged equipment is allowed to be present, witheverywhere else being considered impermissible. Alternatively, thephysical boundaries field 1112 may indicate specific areas of thehospital where the given piece of tagged equipment is not allowed to bepresent, with everywhere else being considered permissible. The chosensignificance of the physical boundaries field 1112 may be different fordifferent pieces of tagged equipment, and may depend on the mostefficient representation in memory. By way of non-limiting example, itmay be the case that a crash cart in a particular Ward should not beremoved from there but may be moved around within the ward; hence, thephysical boundaries for this particular piece of tagged equipment couldbe the particular Ward in question.

Based on the data from the enhanced equipment database 1135 and the datafrom the TDS 616, the tagged equipment monitoring process 820determines, for each piece of tagged equipment, the position of the tagassociated with the piece of tagged equipment, consults the authorizedusers field 1110 for the piece of tagged equipment, determines theposition of the tags for the clinicians who are authorized to use thepiece of tagged equipment, and determines the estimated distance betweenthe tags of the piece of tagged equipment and each of these authorizedclinicians. If, for a particular piece of tagged equipment, theestimated distance exceeds a threshold value for all of the authorizedclinicians (or is not within the threshold value for at least one of theauthorized clinicians), and if the particular piece of tagged equipmentis in motion (e.g., based on historical data), the tagged equipmentmonitoring process 820 will conclude that the particular piece of taggedequipment is being transported by someone or something other than one ofthe authorized clinicians of the particular piece of tagged equipment.The particular piece of tagged equipment is said to be undergoingsuspicious motion, which may be the result of an act of theft. Asuitable alarm signal can thus be generated, which may lead to actionssuch as communicating with building security, activation of cameras,locking of doors, erasure of data, etc.

In addition, having determined, for each piece of tagged equipment, theposition of the tag associated with the piece of tagged equipment, thetagged equipment monitoring process 820 consults the physical boundariesfield 1112 for the piece of tagged equipment and determines whether thepiece of tagged equipment is in an area where it is (or is not) allowedto be, irrespective of whether the piece of tagged equipment is inmotion or not. If the piece of tagged equipment in question is in anarea where it is not allowed to be (or is outside any and all areaswhere it is allowed to be) then a suitable alarm signal can be generatedas described above.

III—Communications Monitoring Process 830.

With reference to FIGS. 9A, 9B and 9C, at step 902, the controller 618detects that a “source clinician” desires to reach a “target clinician”in the hospital. This can be achieved by monitoring the communicationssystem head end 650, as well as the data exchanged during an ongoingsession for the source clinician, to detect a particular clinicianidentifier, or the address or directory number of the communicationdevice 614 (e.g., pager or WLAN phone) or terminal 14A, 14B being usedby a particular clinician. For the purposes of the discussion below, theparticular clinician will be referred to as the “target” clinician.

At step 904, the controller 618 consults the LCE 658 to determine thelocation of the target clinician identified at step 902. At step 906,the controller 618 determines whether the target clinician is availableby applying an “unavailability policy” based at least in part of thelocation of the target clinician determined at step 904. A non-limitingexample of an unavailability policy is to deem the target clinician as“unavailable” when located in a subset of the location-awareness area ofthe hospital, where the subset includes operating rooms and emergencyrooms. Conversely, if the target clinician does not fall within thissubset of the location-awareness area of the hospital, the targetclinician is deemed to be available.

Generally speaking, the subset of the location-awareness area of thehospital where the target clinician will be deemed unavailable dependson knowledge of the topography of the hospital, i.e., the layout andconfiguration of the various rooms, floors and areas of the hospital.The topography of the hospital may be stored in the controller 618 or itmay be stored in the departmental database 26 and accessed by thecontroller 618 when needed.

Of course, the unavailability policy may be more complex than the mereidentification of certain fixed areas of the hospital where targetclinicians are deemed unavailable. For example, the unavailabilitypolicy may be a function of the professional role (e.g., doctor vs.nurse vs. orderly) of the target clinician. In yet another example, thetarget clinician's schedule may impact the result of applying theunavailability policy. For example, a target clinician located in thescrub room before a planned surgical intervention may be deemedunavailable, but would not be deemed unavailable if present in the scrubroom after surgery is complete. Hence, the unavailability policy mayinclude an element of target clinician location history as well asactual location. For instance, for the case of “history=general hospitalarea” and “current location=scrub room” then the target clinician may bedeemed unavailable, whereas for “location history=operating theatre” and“current location=scrub room”, then the target clinician may be deemedavailable.

Thus, it is apparent that the unavailability policy may range fromsimple to complex, to the point where it involves the target clinician'sprofessional role, identity, schedule, etc. It should also beappreciated that the controller 18 may obtain the information relevantfor application of the unavailability policy from the clinician database22, whereas the overall unavailability policy itself may be stored inmemory the controller 18, and changed from time to time by hospitaladministrative staff.

If the outcome of step 906 is that the target clinician is deemedavailable, then with reference to FIG. 9B, the controller 618 proceedsto step 910, where a paging message is sent to the target clinician. Ina non-limiting example embodiment, the paging message can be sent viathe communication system head end 650 to reach the communication device614 (e.g., pager or WLAN phone) being used by the target clinician.Alternatively, the paging message can be sent as an electronic messageto the fixed-wire or mobile terminal 14A, 14B with which the targetclinician has an ongoing session with the HIS 12. In yet anotherembodiment, plural uses of a paging message to attempt to reach thetarget clinician (who, it is recalled, was deemed to be available) canbe employed in parallel.

At step 912, the controller 618 is attentive to receipt of a positiveacknowledgement from the target clinician, either by way of a responsevia the terminal 14A, 14B being used by the target clinician or via thecommunication system head end 650. If a positive acknowledgement isreceived within a certain amount of time (e.g., 10 seconds), then nofurther action needs to be taken, since the target clinician has beenreached and has positively acknowledged that he or she is available. Theremainder of the communication between the source clinician and thetarget clinician may occur in a conventional manner.

However, if the controller 618 does not receive a positiveacknowledgement for a certain amount of time (e.g., 10 seconds) orreceives a negative acknowledgement, then the controller 618 proceeds tostep 914, where it takes a specific action, depending on thecircumstances. A simple example of an action is the display of a replymessage at a device being used by the source clinician, which statessomething to the effect that “Dr. Smith cannot be reached” and offersthe source clinician a menu of choices. These may include:

-   -   1) Attempt to reach a surrogate clinician for Dr. Smith.    -   2) Attempt to reach an alternative clinician for Dr. Smith;    -   3) Leave a message for Dr. Smith.

In this context, a “surrogate clinician” for Dr. Smith represents aclinician who is located near Dr. Smith, and who can therefore contactDr. Smith in case of emergency, but who may not have a comparable skillset to that of Dr. Smith. An “alternative clinician” for Dr. Smithrepresents a clinician who has a skill set comparable to that of Dr.Smith, and who acts as a “backup” for Dr. Smith, but who may not belocated as near to Dr. Smith as the surrogate clinician. The identity ofa surrogate clinician and an alternative clinician for a given targetclinician represent additional data elements that are associated withthe target clinician and it is envisaged that they may be stored in theclinician database 22 alongside other data for the target clinician.Moreover, the identity of the surrogate clinician may be updated by afunction operating in the controller 18, which relies on the LCE 658 todetermine which clinician should be the surrogate clinician for thetarget clinician. Also, there may be more than one alternative orsurrogate clinician for any one target clinician. Furthermore, thelocation of the alternative clinician and/or the skill set of thesurrogate clinician may be displayed for the source clinician toconsider before selecting one of the options 1), 2) and 3) above.

If the source clinician selects option 1) above, then the controller 618proceeds to step 916, where an attempt to reach the surrogate clinicianis made, e.g., by sending a paging message to the surrogate clinician.In a non-limiting example embodiment, the paging message can be sent viathe communication system head end 650 to reach the communication device614 (e.g., pager or WLAN phone) being used by the surrogate clinician.Alternatively, the paging message can be sent as an electronic messageto the fixed-wire or mobile terminal 14A, 14B with which the surrogateclinician has an ongoing session with the HIS 12. In yet anotherembodiment, plural uses of a paging message to attempt to reach thesurrogate clinician (who may or may not be available) can be employed inparallel.

The paging message destined for the surrogate clinician may furthercontain the message to be passed by the surrogate clinician to thetarget clinician. Assuming again that the target clinician is Dr. Smith,the paging message sent to the surrogate clinician could be “Kindly findout from Dr. Smith whether he checked on Mrs. Jones this morning.”,which exemplifies a simple message asking the surrogate clinician toelicit a simple response from the target clinician, and which cannot beanswered until the target clinician is reached.

In the event that option 1) does not end in a satisfactory way (e.g.,the surrogate clinician does not positively acknowledge the pagingmessage), then the controller 618 causes the above options to bere-presented to the source clinician.

If the source clinician selects option 2) above, e.g., after executionof step 914 or after execution of step 916, the controller 618 proceedsto step 920, where an attempt to reach the alternative clinician ismade, e.g., by sending a paging message to the alternative clinician. Ina non-limiting example embodiment, the paging message can be sent viathe communication system head end 650 to reach the communication device614 (e.g., pager or WLAN phone) being used by the alternative clinician.Alternatively, the paging message can be sent as an electronic messageto the fixed-wire or mobile terminal 14A, 14B with which the alternativeclinician has an ongoing session with the HIS 12. In yet anotherembodiment, plural uses of a paging message to attempt to reach thealternative clinician (who may or may not be available) can be employedin parallel.

In the event that this option does not end in a satisfactory way (e.g.,the alternative clinician does not positively acknowledge the pagingmessage), then the controller 618 causes the above options to bere-presented to the source clinician.

If the source clinician selects option 3) above, e.g., after executionof step 914 or after execution of step 916 or after execution of step920, then the source clinician is prompted to leave a message for thetarget clinician. The message is then delivered to, and accessed by, thetarget clinician in a conventional manner.

It is noted that the selection of option 1), 2) or 3) can be automaticbased on source clinician preferences, or manual, based on the judgmentof the source clinician. For example, the source clinician may considerthat it is preferable to contact a surrogate clinician with a slightlyinferior or superior skill set than to contact an alternative clinicianwho may be further from the target clinician. In other circumstances,the source clinician may decide just the opposite, when a very specificskill set is required.

Returning now to step 906, if the outcome of this step was that thetarget clinician is deemed unavailable, then with reference now to FIG.9C, the controller 618 proceeds to step 924, where a reply message issent to the source clinician. Assuming that target clinician is Dr.Smith, and that the location of the target clinician was found to be“Operating Room 22”, the reply message may state something to the effectthat “Dr. Smith is currently unavailable in Operating Room 22” andoffers the source clinician a menu of choices. These include:

-   -   4) Attempt to reach an alternative clinician for Dr. Smith;    -   5) Leave a message for Dr. Smith;    -   6) Wait for Dr. Smith to become available;    -   7) Attempt to reach a surrogate clinician for Dr. Smith.

If the source clinician selects option 4) above, then the controller 618proceeds to step 926, where an attempt to reach the alternativeclinician is made, e.g., by sending a paging message to the alternativeclinician. In a non-limiting example embodiment, the paging message canbe sent via the communication system head end 650 to reach thecommunication device 614 (e.g., pager or WLAN phone) being used by thealternative clinician. Alternatively, the paging message can be sent asan electronic message to the fixed-wire or mobile terminal 14A, 14B withwhich the alternative clinician has an ongoing session with the HIS 12.In yet another embodiment, plural uses of a paging message to attempt toreach the alternative clinician (who may or may not be available) can beemployed in parallel.

In the event that this option does not end in a satisfactory way (e.g.,the alternative clinician does not positively acknowledge the pagingmessage), then the controller 618 causes the above options to bere-presented to the source clinician.

If the source clinician selects option 5) above, e.g., after executionof step 924 or after execution of step 926, then the source clinician isprompted to leave a message for the target clinician. The message isthen delivered to, and accessed by, the target clinician in aconventional manner.

If the source clinician selects option 6) above, e.g., after executionof step 924 or after execution of step 926, the controller 618 performsstep 928, where communication with the target clinician is delayed untilcontinued application of the unavailability policy reveals that thetarget clinician has become available. At that point, a paging messageis sent as described herein above with reference to step 910 in FIG. 9Band the steps thereafter.

If the source clinician selects option 7) above, then the controller 618proceeds to step 930, where an attempt is made to reach the surrogateclinician, e.g., by sending a paging message to the surrogate clinician.In a non-limiting example embodiment, the paging message can be sent viathe communication system head end 650 to reach the communication device614 (e.g., pager or WLAN phone) being used by the surrogate clinician.Alternatively, the paging message can be sent as an electronic messageto the fixed-wire or mobile terminal 14A, 14B with which the surrogateclinician has an ongoing session with the HIS 12. In yet anotherembodiment, plural uses of a paging message to attempt to reach thesurrogate clinician (who may or may not be available) can be employed inparallel.

The paging message may further contain the message to be passed to thetarget clinician. Assuming again that the target clinician is Dr. Smith,the paging message sent to the surrogate clinician could be “Thank youfor finding out from Dr. Smith whether he checked on Mrs. Jones thismorning.”, which exemplifies a simple message having a “Yes/No” responsebut which cannot be asked of any other clinician than the targetclinician.

In the event that this option does not end in a satisfactory way (e.g.,the alternative clinician does not positively acknowledge the pagingmessage), then the controller 618 causes the above options to bere-presented to the source clinician.

It is noted that the selection of option 4), 5), 6) or 7) can beautomatic based on source clinician preferences, or manual, based on thejudgment of the source clinician. For instance, option 7) should ideallybe used only in cases of extreme urgency, where Dr. Smith's personalinput is vital, such as in a matter of life and death. This isreasonable as a last resort since there is a chance that even though Dr.Smith was deemed unavailable at step 908, he or she may still be in aposition to reprioritize his or her activities upon evaluating themerits the current situation.

Thus, it should be appreciated that application of an unavailabilitypolicy which is sensitive to a target clinician's whereabouts can savevaluable time in a situation where one wishes to reach the targetclinician. For example, if the target clinician is deemed unavailable,this will be known to the controller 618 and therefore the sourceclinician will not have to wait in vain for the lack of a responsebefore attempting to contact another clinician. Moreover, the ability tocontact a surrogate clinician who is in the vicinity of the targetclinician also has advantages.

IV—Medical Event Monitoring Process 840.

With reference to FIG. 10, at step 1002, the controller 618 detects thatan emergency “medical event” has occurred in the hospital, along withits location. The term “medical event” include but is not limited to aninternal hospital emergency that afflict a patient admitted to thehospital, such as the occurrence of a heart attack, seizure, etc.However, the term “medical event” should not be construed as applyingonly to admitted patients, and therefore is meant to include medicalemergencies that may afflict a clinician or other worker in the hospitalor even a visitor of an admitted patient. In addition, the term “medicalevent” should also be understood to include an occurrence that isnon-medical in nature (such as an electrical shock, hurricane, tornado,flood) but that may require medical assistance.

For example, “Code Blue” is an expression indicative a medical eventwhere a person is possibly in danger of immediately dying. The procedureis to immediately call for help (dial 911 or press the nearest “codeblue button”) and begin life-saving techniques if necessary. Code Bluebuttons (not shown in the drawings) are typically distributed throughoutthe hospital at known locations, and in an embodiment of the presentinvention they may be in communication with the controller 618 via anetwork and/or possibly the communications system head end 650. Thecontroller 618 therefore has the ability to determine when a particularCode Blue button has been pressed as well as the location of that codeblue button, which can be determined from the hospital floor plan.Alternatively, for mobile Code Blue buttons, these can be provided withtheir own tags (not shown) and the location of a Code Blue button thathas been pressed would be determined using the TDS 616.

Similarly, the controller 618 has the ability to monitor thecommunications from the various communication devices 614 in order todetect if someone has dialed 911 and the location of the communicationdevice 614 that has dialed 911. In addition, the nature and location ofthe medical event can be entered by anyone with access to one of theterminals 14A, 14B, which causes the controller 618 to obtain thisinformation regarding the medical event.

At step 1004, the controller 618 determines a skill set associated withthe medical event. For example, a “Code Blue” may require a physicianand two nurses. The skill sets associated with various medical eventscan be encoded in a mapping that is stored in a database (not shown) inthe controller 618 or in one of the databases 22, 24, 26, 35, 27.

At step 1006, the controller 618 determines the identity of clinicianswhose skills match one or more of the requisite skills sets found atstep 1004. For example, by consulting the clinician profiles in theclinician database 22, the controller 618 can determine the identity ofthe various clinicians who are on duty and who have the requisite skillsets. These clinicians are considered to be “potentially eligibleassistance-providing clinicians”.

At step 1008, the eligibility of the potentially eligibleassistance-providing clinicians is confirmed, at least in part on thebasis of distance from where the medical event is taking place. Forexample, the controller 618 consults the LCE 658, which maintainslocation information regarding various clinicians based on detection ofthe tags worn by those clinicians. On the basis of the location of themedical event and the locations of the potentially eligibleassistance-providing clinicians, the controller 618 determines whichpotentially eligible assistance-providing clinicians are eligible toprovide assistance for the medical event. Thus, in one embodiment,eligibility can be a function of proximity to the medical event; inother words, the closer a potentially eligible assistance-providingclinician is to the medical event, the more eligible he or she is deemedto be to provide assistance. However, it should be understood that amore complex, but still location-dependent, policy can be applied, basedadditionally on schedule, historical data, etc.

The net result of this approach is that the nearest suitably qualifiedclinicians (i.e., the eligible assistance-providing clinicians) aresummoned, thereby minimizing the time to bring the “code blue” teamtogether.

At step 1010, the controller 618 requests assistance from the eligibleassistance-providing clinicians determined at step 1008. Specifically,this can involve transmission of a message to the eligibleassistance-providing clinicians which specifies the nature and locationof the medical event, as determined at step 1002. The message destinedfor a particular eligible assistance-providing clinician can betransmitted to that clinician via a fixed-wire or mobile terminal 14A,14B being used by the clinician, or through a communication device 614(e.g., pager or WLAN phone) being used by the clinician, etc. If theeligible assistance-providing clinician is the only one having thatskill set within a certain acceptable distance from the medical event,and if an that clinician is not reachable for any reason, then asurrogate clinician in the vicinity may be contacted to forward themessage.

In a variant, steps 1006 and 1008 can be reversed. Specifically, thecontroller 618 may begin by applying a location-dependent policy to allclinicians, regardless of their skill set. For example, the controller618 may consult the LCE 658 in order to obtain the identity and locationof the clinician closest to the medical event. In other cases, thelocation-dependent policy may be more complex. In any event, the endresult is the identification of an “eligible potentiallyassistance-providing clinician”, i.e., a clinician who is located closeto the medical event, but whose skill set remains unknown. Accordingly,the controller 618 then consults the clinician database 22 to determinewhether the skill set associated with the eligible potentiallyassistance-providing clinician matches or exceeds one of the skill setsthat is required in order to handle the medical event. If so, thatparticular skill set is considered to have been met and the search foran eligible assistance-providing clinician is over for that particularskill set (although there may be more than one requisite skill set or aneed for more than one clinician of the same skill set; in such cases,the process is repeated as many times as needed). If, however, theeligible potentially assistance-providing clinician does not have any ofthe requisite skill sets, then this clinician is not“assistance-providing” and the search continues for the next closestclinician, et cetera, until an eligible assistance-providing clinicianfor all requisite skill sets has been identified. Again, operation ofthe controller 618 expedites formation of a response team to the medicalevent, by identifying the nearest clinicians of the requisite skill set.In this way, precious seconds or minutes can be saved before the team isassembled.

V-RF Interference Monitoring Process 850.

In order to support the RF interference monitoring process 850, theequipment database 35 is expanded so as to include additional fields foreach piece of tagged equipment (e.g., terminal or medical device),including but not limited to RF-radiating terminals and sensitivemedical devices. Specifically, with reference to FIG. 12, an enhancedequipment database 1235 includes the same fields as the equipmentdatabase 35 in FIG. 1D, in addition to a “maximum transmitted RF power”field 1210 and an “exposed RF field strength limit” field 1220. Ofcourse, an enhanced equipment database could be based on the enhancedequipment database 1135 previously described with reference to thetagged equipment monitoring process 820.

For a given piece of tagged equipment, the “maximum transmitted RFpower” field 1210 indicates the maximum level of RF power that can begenerated by the given piece of tagged equipment under its currentoperating condition. This may be given in units such as milliwatts (mW).For example, a WLAN phone may generate in the range of 50-100 mW of RFpower.

For a given piece of tagged equipment, the “exposed RF field strengthlimit” field 1220 indicates the immunity of the given piece of taggedequipment, e.g., level of RF interference that the given piece of taggedequipment is designed to withstand. One common way of expressing theexposed RF field strength limit is in terms of a field strength(V/meter) over a given range of frequencies. The immunity may be definedby a standard, a non-limiting example of which is IEC-60601-1-2, 2^(nd),2001 edition, incorporated by reference herein. According to thisstandard, modern medical devices are required to function in a 10V/mradio frequency interfering field (over a wide RF frequency range) if itis life-supporting equipment and 3V/m if it is not life-supporting. Inother words, life-supporting equipment manufactured to meet the abovestandard may malfunction if exposed to RF interference having a level ofgreater than 10V/m and non-life-supporting equipment manufactured tomeet the above standard may malfunction if it is exposed to RFinterference having a (somewhat weaker) level of more than 3 V/m.

Based on the above example data, a WLAN phone operating at around 50-100mW can come to within about 2 meters of a 3V/m-immune medical device orto within about 0.6-0.7 meters of a 10 V/m-immune medical device withoutany deleterious effect, but coming any closer both violatesIEC-60601-1-2 and puts the performance of the medical device injeopardy. Those skilled in the art will appreciate that IEC-60601-1-2defines adequate and ample margins such that, irrespective ofpropagation conditions, a transmitter that does not approach a medicalinstrument to closer that the transmit-power-dependent-distance definedin that specification can never cause an RF field in excess of thedesign limits of a medical instrument at that transmit power.

Also, it is recalled that the medical devices 602 themselves areequipped with tags, which are transmitting elements in their own right.While this may seem self-defeating at first glance, interference intothe medical device 602 can be avoided by using ultra-low-powertransmission. This is possible because the bandwidth needed to convey atag identifier at a required periodicity is miniscule, relative to thebandwidth required for communication via a WLAN phone. Specifically, byapplication of Shannon's limit theory on information channels, the lowdata rate requirement allows the tags to operate at a significantlylower power level than a WLAN phone.

For example, the tags may be UWB multi-GHz tags which transmitinfrequent (1-10/sec) RF bursts of very short duration (e.g. 1nanosecond) and with burst peak powers around 15-30 mW such that theintegrated RF power over time is extremely low (nanowatts or less), suchthat it does not interfere with narrowband or even wideband electronicsfound in a given medical device. On the other hand, the spectralcomponents of multi-GHz CW modulated transmissions from a WLAN phone dointerfere if received at a high enough power, since non-linearities inthe electronics of the medical device rectify the high-frequencycarrier, thereby injecting the resulting demodulated envelope into therest of the medical device. This may contain signal components withinthe passband of the medical device, causing the latter to malfunction.

Since a sensitive medical device may malfunction if strong sources of RFpower are brought so close as to overcome the immunity of the medicaldevice in question, it becomes highly advantageous to control thetransmitted RF power as a function of distance between the sensitivemedical device and the source of RF power. Specifically, as a source ofRF power approaches the sensitive medical device (or vice-versa), it isadvantageous to reduce the transmitted RF power of the source.Conversely, when there is no longer any sensitive medical device in thevicinity of the emitter, its transmitted RF power can be increased again(e.g., in order to support a higher data rate).

The aforementioned principle is now described in somewhat greater detailwith additional reference to FIG. 13, which is shown as being executedfor a particular piece of tagged equipment having a non-zero entry inthe exposed RF field strength limit field 1220. This is representativeof a sensitive medical device and will hereinafter be referred to as an“interferee”. It should be understood that a similar flowchart may beexecuted in parallel for all other interferees.

At step 1310, based on the data from the enhanced equipment database1135 and the data from the TDS 616, the RF interference monitoringprocess 850 identifies those pieces of tagged equipment having anon-zero entry in the transmitted RF power field 1210. In other words,the RF interference monitoring process 850 identifies potential sourcesof RF interference for the interferee, which are hereinafter referred toas “interferors”.

At step 1320, for each given interferor, the RF interference monitoringprocess 850 determines the position of the tag associated with the giveninterferor (along with the position of the tag associated with theinterferee, although this could possibly be pre-computed or computed ona less frequent basis). At step 1330, the RF interference monitoringprocess 850 determines the estimated distance between the positionscomputed at step 1320. At step 1340, the RF interference monitoringprocess 850 computes an estimate of the exposed RF field strength at theinterferee by computing a mathematical function of (i) the currenttransmitted RF power of the given interferor and (ii) the estimateddistance between each given interferor and the interferee (found at step1330).

In specific non-limiting examples, the mathematical function may bebased upon (a) textbook inverse-square-law-based free space propagationproperties; (b) a reference model (e.g. AWGN, HiperLAN) that tries totake into account median building properties; and/or (c) mathematicalrelationships defined in IEC-60601-1-2 or a similar direct EMI standard.Where a reference is in place, such as the IEC-60601-1-2 standard, thetransmit-power/interferee-sensitivity/interferor-interferee-distancerelationships from the reference can be used to ensure that transmittersdo not violate a safe power level according to that reference.

Generally speaking, the mathematical function may take intoconsideration various useful, concrete and tangible factors, such asanalytical data regarding free space propagation and empirical dataregarding propagation in the environment of the hospital in question (orhospitals in general). In addition, the mathematical function may alsotake into consideration the location coordinates of the tags associatedwith each given interferer and the interferee with respect totopographical and structural knowledge of the hospital (e.g., floorplan, number and thickness of walls between each given interferer andthe interferee, as well as materials used to construct them), inaddition to knowledge of whether each given interferer and theinterferee are located on the same floor (to account for RF absorptionby floors and ceilings). Still other functions that permit thecomputation of an estimate of the exposed RF field strength at theinterferee are within the scope of the present invention.

At step 1350, the outcome of step 1340, which is an estimate of theexposed RF field strength at the interferee due to each giveninterferor, is compared to the value in the exposed RF field strengthlimit field 1220 for the interferee. If the estimate of the exposed RFfield strength is greater than the exposed RF field strength limit (orless than but to within a pre-determined delta thereof) for at least oneof the given interferors (hereinafter referred to as a “guiltyinterferor” or “guilty interferors”), then the RF interferencemonitoring process 850 concludes that the current transmitted RF powerlevel of the guilty interferor(s) is excessive. In general terms, it canbe said that an “RF interference constraint” is violated). Thus, inresponse, the next step is step 1360, where the RF interferencemonitoring process 850 sends a message to the power control entity 630,causing it to send a message to each guilty interferor, ultimatelycausing the guilty interferors to reduce their transmitted RF power by acertain amount (hereinafter referred to as a step size) or to a specificlevel.

The process then returns to step 1310, which eventually leads to acomputation of new estimates of the exposed RF field strength at theinterferee due to various interferors (including the guiltyinterferor(s)). Assuming for argument's sake that the guiltyinterferor(s) and the interferee have not moved relative to one another,the new exposed RF field strength estimates at the interferee due to theguilty interferor(s) will tend to be lower than the previous ones, andif the step size is chosen judiciously, the new estimates of the exposedRF field strength will fall below the value in the exposed RF fieldstrength limit field 1220 for the interferee, hence not requiring afurther reduction in the RF power generated by the guilty interferors.

It is noted that in some cases where the interferer is a mobileterminal, a session may be ongoing between the mobile terminal and theHIS 12 when the above steps take place. By lowering the transmitted RFpower of the mobile terminal in accordance with step 1360, the mobileterminal may not be able to maintain the same data rate for the ongoingsession, in the direction from the mobile terminal to the HIS 12. Inother words, reducing the transmitted RF power may have the consequenceof degrading the transmission capability between the mobile terminal andthe nearby WLAN access point 60. This can be addressed by reducing thechannel throughput and adapting the radio link to the new conditions.Standard techniques may be used for this purposes, such as thosedescribed in IEEE standard 802.11.

Accordingly, before causing the mobile terminal to lower the transmittedpower, the RF interference monitoring process 850 may perform anadditional step 1355, whereby a command is sent to the sessionmanagement function 53, such command being instrumental in causing thesession management function 53 to lower the data rate being used by themobile terminal to transmit over the communication network 610. This maybe achieved by using less dense coding constellations, resulting inlower throughput.

Returning now to step 1350, if execution of this step revealed that theestimate of the exposed RF field strength at the interferee due to eachgiven interferor is less than the value in the exposed RF field strengthlimit field 1220 for the interferee, then the RF interference monitoringprocess 850 proceeds to step 1380, where it is determined whether thoseinterferors who are not at full power (i.e., transmitting at a levelless than the value of the “maximum transmitted RF power” field 1210 forthe interferor in question), would hypothetically cause the RFinterference constraint to be violated if they were to transmit at thenext highest power setting.

If there is no such hypothetical violation of the RF interferenceconstraint for a particular interferer, the controller 18/618 proceedsto step 1390 where it causes the transmitted RF power (and,correspondingly, the data rate) to be increased for the particularinterferor. On the other hand, if there would be a hypotheticalviolation of the RF interference constraint for a particular interferor,there is no change in the transmitted power level for the particularinterferor. Similarly, for those interferors already transmitting atfull power, there is no change in the transmitted power level.

Thus, as a given interferor and the interferee get closer to oneanother, the RF interference monitoring process 850 causes the giveninterferer to transmit at ever lower RF power levels, and also causesthe use of less dense coding constellations. Despite the reducedthroughput, a session can be maintained while the interferer in questioncan be brought much closer to the interferee than would be possible atfull power.

It should also be noted that the reduced throughput for a giveninterferor is not a disadvantage in most cases, since it affects therelatively low data rate in the direction from the given interferer tothe HIS 12. There is typically no need to adjust the transmit power ofthe WLAN access points 60 (i.e., in the reverse direction), since theyare strategically positioned in locations close to the ceiling and mayhave complex antenna patterns, such that interference with stationarysensitive medical device can be avoided by design. However, should asensitive medical device be moved around (e.g., during surgery) toapproach a WLAN access point 60, it is within the scope of the presentinvention to apply the principles described above to temporarily reducethe transmit power of the WLAN access point.

The communications network 10 of the first system architecture and/orthe communications network 610 of the second system architecture mayalso comprise a plurality of chargers disposed at various locationsthroughout the hospital for the example purpose of replenishing thebattery charge in hand-held devices. The chargers are connected to thecontroller 18/618 by a communications link. In an embodiment, thechargers comprise charging stations for receiving mobile terminals (suchas PDAs or tablet PCs) and having electrical connections for providing arecharging capability. The mobile terminals in the charger do notsupport any session for any clinician.

A certain level of interaction between a given clinician (hereinafterdenoted 20*) and a given charger occurs where clinician 20* inserts intothe charger a mobile terminal that he or she is currently using, forexample, when leaving for the day or when the battery is nearexhaustion. In this case, clinician 20* approaches the charger, wherehis or her presence will be detected by a clinician-charger proximitymonitoring process executed by the controller 18 in the first systemarchitecture and/or the controller 618 in the second systemarchitecture. The controller 18/618 may then execute a series of steps,such as (in the case where an ongoing session exists) causing thedisplay of a greeting message such as “Please insert this mobileterminal into a charging station and consider whether you wish toterminate or suspend your session”, or any conceivable variant thereof.Before inserting the mobile terminal into the charger, clinician 20* maythus choose to explicitly terminate or suspend an ongoing session (ifthere is one). Explicit termination or suspension of a session hasalready been described herein above in the context of scenarios C— andD—, respectively. It will be recalled that termination leads to endingthe session for clinician 20*, whereas suspending the session has theeffect of putting the session “on-hold” until clinician 20*authenticates himself/herself when in the vicinity of another terminal.

Another level of interaction between clinician 20* and the charger mayoccur where clinician 20* is deemed to not be using a mobile terminaland is also deemed to be “in proximity” to the charger (i.e., hassatisfied a proximity condition). For example, this may occur whenclinician 20* begins his or her shift, or has just inserted his or hermobile terminal into the charger, possibly following suspension ortermination of a session as described in the previous paragraph. Thefact that clinician 20* is in proximity to the charger and thatclinician 20* is not using a mobile terminal is detected by theaforementioned clinician-charger proximity monitoring process executedby the controller 18 in the first system architecture and/or thecontroller 618 in the second system architecture. In this case, thecontroller 18/618 executes a series of steps, as now described withreference to FIG. 14.

At step 1410, a signal is provided to clinician 20* to suggest aparticular mobile terminal that he or she may use. This may be done bycontrolling (e.g., by way of colour or by blinking) a light located onthe outside of the suggested mobile terminal or causing the display of apersonalized greeting message on the suggested mobile terminal. This mayalso be done by controlling a visual indicator on the charger itself soas to indicate to the clinician 20* the suggested mobile terminal. Thesuggested mobile terminal may be selected on the basis of chargecapacity or other parameter. Optionally, at step 1420, a lockingmechanism which is by default engaged for all mobile terminals in thecharger would be disengaged for the suggested mobile terminal whileremaining engaged for all other mobile terminals presently in thecharger.

(It should be noted that in the absence of a locking mechanism, removalof a mobile terminal may be possible by someone who does not have aclinician's tag, and therefore it may be appropriate to detect this factusing the process being described here. Even if this is not the case,such action would nevertheless be detected as potentially suspiciousmotion by the tagged equipment monitoring process 820 described above.)

Once the suggested mobile terminal is extracted by clinician 20*, thecontroller 18/618 proceeds to step 1430, whereby authentication data isawaited from clinician 20*, either in response to a request (such as maybe issued via a greeting message) or sua sponte. This represents anopportunity for clinician 20* to authenticate himself/herself. If asuitable response is not received within a predetermined amount of time(e.g., 3 seconds), the controller 18/618 proceeds to step 1440, where itinfers that the mobile terminal has been taken by someone who, althoughequipped with clinician 20*'s tag (resulting in unlocking of the nowextracted mobile terminal), is not familiar with the need toauthenticate oneself. Since this may arise in the context of theft, anaction is taken at step 1450 to signal a problem. For example, anaudible or visual alarm may be triggered at the charger, and securitypersonnel may be advised.

On the other hand, authentication data may be received at step 1430, inwhich case the authentication process 70 previously described may be maybe executed at step 1460. If the result of the authentication process isa failure, then at step 1450, similar action to the above may be taken(e.g., sounding of an alarm, etc.)

Assuming that the result of the authentication process is a success,then the controller 18/618 proceeds to step 1470, where the cliniciandatabase 22 is consulted, resulting in the acquisition of appropriatepersonalization or customization parameters for the purposes ofinitializing the extracted mobile terminal. The controller 18/618 thenproceeds to step 1480, whereby if there is a suspended session forclinician 20*, the controller 18/618 causes the session to be resumed inthe manner previously described in this specification. Where there is nosuspended session for clinician 20*, the remaining steps as describedherein above in the context of the session establishment process 82 areperformed in order to establish a session for clinician 20*.

An alternative sequence of steps in the interaction between clinician20* and the charger, following detection of the state where clinician20* is in proximity to the charger but is not using a mobile terminal,is now described with reference to FIG. 15. In this case, a lockingmechanism is by default engaged for all mobile terminals in the charger.

At step 1510, which is identical to step 1410 in FIG. 14, a signal isprovided to clinician 20* to suggest a particular mobile terminal thathe or she may use. This may be done by controlling (e.g., by way ofcolour or by blinking) a light located on the outside of the suggestedmobile terminal or causing the display of a personalized greetingmessage on the suggested mobile terminal. The suggested mobile terminalmay be selected on the basis of charge capacity or other parameter.

The controller 18/618 then proceeds to step 1520, whereby authenticationdata is awaited from clinician 20*, either in response to a request orsua sponte. If a suitable response is not received within apredetermined amount of time (e.g., 3 seconds), then the controller18/618 does not need to do anything, since the locking mechanism remainsengaged with respect to the mobile terminals in the charger.

On the other hand, authentication data may be received at step 1520, inwhich case the authentication process 70 previously described may be maybe executed at step 1530. If the result of the authentication process isa failure then, again, the controller 18/618 does not need to doanything, since the locking mechanism remains engaged with respect tothe mobile terminals in the charger.

However, assuming that the result of the authentication process is asuccess, the controller 18/618 proceeds to step 1540, where the lockingmechanism is disengaged for the suggested mobile terminal, allowing thesuggested terminal to be extracted. Next, the controller 18/618 executesstep 1550, where the clinician database 22 is consulted, resulting inthe acquisition of appropriate personalization or customizationparameters for the purposes of initializing the extracted mobileterminal.

At this stage, clinician 20* is in possession of the suggested mobileterminal and is in fact detected to be in proximity to the suggestedmobile terminal, which may trigger the various session establishment andsession resumption processes described above. For example, if there is asuspended session for clinician 20*, the controller 18/618 causes thesession to be resumed in the manner previously described in thisspecification. Where there is no suspended session for clinician 20*,the controller 18/618 causes the session to be established in the mannerpreviously described in this specification. Since both of theseprocesses require authentication of clinician 20*, it will be seen thatthere are in fact two authentications that clinician 20* needs toperform before gaining access to the HIS 12 in the embodiment of FIG.15, as opposed to one in the embodiment of FIG. 14. However, theembodiment of FIG. 15 guarantees that a mobile terminal will not betaken by an unauthorized individual and hence obviates the step ofsignaling an alarm condition.

Thus, the present disclosure has shown how a healthcare informationsystem (HIS) such as a hospital or clinical information system whichallows clinicians access to various hospital databases includingpatients' electronic health records (EHRs) can be made more efficient,effective, safe and functional by the exploitation of locationawareness.

It should be mentioned that the examples of proximity and remotenessconditions have been simplified for the benefit of the reader. Thoseskilled in the art will appreciate that the parameters used to definethe various proximity and remoteness conditions can be tailored to suitspecific operational requirements, and that additional parameters can beused. Furthermore, different parameters can be used for declaringproximity or remoteness of different types of terminals (e.g.,fixed-wire vs. mobile), different professional roles, differentindividual clinicians, different types of medical devices, etc.

Those skilled in the art will appreciate that in some embodiments,certain functionality or functional entities of the controller 18/618,the authentication entity 28 and/or the HIS 12 may be implemented aspre-programmed hardware or firmware elements (e.g., application specificintegrated circuits (ASICs), electrically erasable programmableread-only memories (EEPROMs), etc.), or other related components. Inother embodiments, the controller 18/618, the authentication entity 28and/or the HIS 12 may comprise an arithmetic and logic unit (ALU) havingaccess to a code memory (not shown) which stores program instructionsfor the operation of the ALU in order to implement the functionalentities and execute the various processes and functions describedabove. The program instructions could be stored on a medium which isfixed, tangible and readable directly by the controller 18/618, theauthentication entity 28 and/or the HIS 12, (e.g., removable diskette,CD-ROM, ROM, or fixed disk), or the program instructions could be storedremotely but transmittable to the controller 18/618, the authenticationentity 28 and/or the HIS 12 via a modem or other interface device (e.g.,a communications adapter) connected to a network over a transmissionmedium. The transmission medium may be either a tangible medium (e.g.,optical or analog communications lines) or a medium implemented usingwireless techniques (e.g., microwave, infrared or other transmissionschemes).

Although various embodiments have been illustrated, this was for thepurpose of describing, but not limiting, the invention. Variousmodifications will become apparent to those skilled in the art and arewithin the scope of the present invention, which is defined by theattached claims.

1. A method of managing access to a healthcare information system of ahealthcare establishment communications network, said method comprising:receiving data regarding a wirelessly detectable tag associated with aclinician; determining whether the clinician is positioned relative to aterminal of the healthcare establishment communications network suchthat a proximity condition is satisfied based at least in part on thedata regarding the wirelessly detectable tag; responsive to theproximity condition being satisfied, providing an opportunity forauthentication of the clinician; receiving authentication data from theclinician; authenticating the clinician using the receivedauthentication data and pre-determined authentication data associatedwith the clinician and contained in the healthcare information system;and responsive to successful authentication of the clinician,establishing a session for the clinician between the terminal and thehealthcare information system.
 2. A method as defined in claim 1,wherein the data regarding the wirelessly detectable tag comprises: dataindicative of an identifier of the wirelessly detectable tag; and dataindicative of a distance between the wirelessly detectable tag and adetector associated with the terminal and operative to detect a signalprovided by the wirelessly detectable tag.
 3. A method as defined inclaim 2, wherein the data indicative of a distance between thewirelessly detectable tag and a detector associated with the terminaland operative to detect a signal provided by the wirelessly detectabletag comprises data indicative of a travel time of the signal.
 4. Amethod as defined in claim 2, wherein the data indicative of a distancebetween the wirelessly detectable tag and a detector associated with theterminal and operative to detect a signal provided by the wirelesslydetectable tag comprises data indicative of an intensity of the signal.5. A method as defined in claim 1, wherein the data regarding thewirelessly detectable tag comprises: data indicative of an identifier ofthe wirelessly detectable tag; and data indicative of a respectivedistance between the wirelessly detectable tag and each one of at leastthree detectors spatially distributed in the healthcare establishmentcommunications network, each one of the at least three detectors beingoperative to detect a signal provided by the wirelessly detectable tag.6. A method as defined in claim 5, wherein the data indicative of arespective distance between the wirelessly detectable tag and each oneof at least three detectors spatially distributed in the healthcareestablishment communications network comprises data indicative of arespective travel time of the signal detected by each one of the atleast three detectors.
 7. A method as defined in claim 5, wherein thedata indicative of a respective distance between the wirelesslydetectable tag and each one of at least three detectors spatiallydistributed in the healthcare establishment communications networkcomprises data indicative of a respective intensity of the signaldetected by each one of the at least three detectors.
 8. A method asdefined in claim 1, wherein determining that the proximity condition issatisfied comprises obtaining an indication of the clinician beingwithin a predetermined distance from the terminal.
 9. A method asdefined in claim 1, wherein determining that the proximity condition issatisfied comprises obtaining an indication of the clinician beingwithin a predetermined distance from the terminal for a predeterminedperiod of time.
 10. A method as defined in claim 1, wherein providing anopportunity for authentication of the clinician comprises beingattentive to data indicative of a request for authentication of theclinician.
 11. A method as defined in claim 1, wherein providing anopportunity for authentication of the clinician comprises beingattentive for a predetermined period of time to data indicative of arequest for authentication of the clinician.
 12. A method as defined inclaim 10, wherein the data indicative of a request for authentication ofthe clinician comprises the received authentication data.
 13. A methodas defined in claim 1, wherein providing an opportunity forauthentication of the clinician comprises causing display of a greetingmessage on a display of the terminal.
 14. A method as defined in claim1, wherein the received authentication data comprises data indicative ofa biometric characteristic of the clinician.
 15. A method as defined inclaim 14, wherein the biometric characteristic of the clinician is afingerprint of the clinician.
 16. A method as defined in claim 15,wherein the data indicative of the biometric characteristic of theclinician is obtained via a fingerprint reader associated with thewirelessly detectable tag.
 17. A method as defined in claim 1, whereinthe received authentication data comprises data indicative of a passwordsubmitted by the clinician.
 18. A method as defined in claim 1, furthercomprising, responsive to unsuccessful authentication of the clinician,denying establishment of a session for the clinician between theterminal and the healthcare information system.
 19. A method as definedin claim 1, further comprising, responsive to the proximity conditionbeing satisfied and prior to authentication of the clinician, accessinginformation contained in the healthcare information system inanticipation of potential establishment of a session for the clinicianbetween the terminal and the healthcare information system.
 20. A methodas defined in claim 19, wherein accessing information contained in thehealthcare information system in anticipation of potential establishmentof a session for the clinician between the terminal and the healthcareinformation system comprises accessing information related to theclinician.
 21. A method as defined in claim 20, wherein the informationrelated to the clinician comprises a profile of the clinician.
 22. Amethod as defined in claim 20, wherein the information related to theclinician comprises information related to at least one patientassociated with the clinician.
 23. A method as defined in claim 22,wherein the information related to at least one patient associated withthe clinician comprises at least a portion of an electronic healthrecord of each one of the at least one patient associated with theclinician.
 24. A method as defined in claim 19, wherein accessinginformation contained in the healthcare information system inanticipation of potential establishment of a session for the clinicianbetween the terminal and the healthcare information system comprisesaccessing information related to at least one patient.
 25. A method asdefined in claim 24, wherein the information related to at least onepatient comprises at least a portion of an electronic health record ofeach one of the at least one patient.
 26. A method as defined in claim19, wherein accessing information contained in the healthcareinformation system in anticipation of potential establishment of asession for the clinician between the terminal and the healthcareinformation system comprises accessing information related to at leastone patient in proximity to the terminal.
 27. A method as defined inclaim 26, wherein the information related to at least one patient inproximity to the terminal comprises at least a portion of an electronichealth record of each one of the at least one patient in proximity tothe terminal.
 28. A method as defined in claim 1, wherein the sessionfor the clinician between the terminal and the healthcare informationsystem causes information to be displayed on a display of the terminal,said method further comprising: determining whether the clinician ispositioned relative to the terminal such that a remoteness condition issatisfied based at least in part on the data regarding the wirelesslydetectable tag; responsive to the remoteness condition being satisfied,causing at least a portion of the information to cease to be displayedon the display of the terminal.
 29. A method as defined in claim 28,wherein determining that the proximity condition is satisfied comprisesobtaining an indication of the clinician being within a firstpredetermined distance from the terminal, and determining that theremoteness condition is satisfied comprises obtaining an indication ofthe clinician not being within a second predetermined distance from theterminal.
 30. A method as defined in claim 29, wherein the firstpredetermined distance is different from the second predetermineddistance.
 31. A method as defined in claim 28, wherein determining thatthe proximity condition is satisfied comprises obtaining an indicationof the clinician being within a first predetermined distance from theterminal for a first predetermined period of time, and determining thatthe remoteness condition is satisfied comprises obtaining an indicationof the clinician not being within a second predetermined distance fromthe terminal for a second predetermined period of time.
 32. A method asdefined in claim 31, wherein the first predetermined distance isdifferent from the second predetermined distance.
 33. A method asdefined in claim 32, wherein the first predetermined period of time isdifferent from the second predetermined period of time.
 34. A method asdefined in claim 31, wherein the first predetermined period of time isdifferent from the second predetermined period of time.
 35. A method asdefined in claim 1, further comprising: determining whether theclinician is positioned relative to the terminal such that a remotenesscondition is satisfied based at least in part on the data regarding thewirelessly detectable tag; responsive to the remoteness condition beingsatisfied, terminating the session for the clinician between theterminal and the healthcare information system.
 36. A method as definedin claim 35, wherein the session for the clinician between the terminaland the healthcare information system causes information to be held in aholding location of the healthcare information system, whereinterminating the session for the clinician between the terminal and thehealthcare information system comprises deleting from the holdinglocation the information held therein.
 37. A method as defined in claim35, wherein determining that the proximity condition is satisfiedcomprises obtaining an indication of the clinician being within a firstpredetermined distance from the terminal, and determining that theremoteness condition is satisfied comprises obtaining an indication ofthe clinician not being within a second predetermined distance from theterminal.
 38. A method as defined in claim 37, wherein the firstpredetermined distance is different from the second predetermineddistance.
 39. A method as defined in claim 35, wherein determining thatthe proximity condition is satisfied comprises obtaining an indicationof the clinician being within a first predetermined distance from theterminal for a first predetermined period of time, and determining thatthe remoteness condition is satisfied comprises obtaining an indicationof the clinician not being within a second predetermined distance fromthe terminal for a second predetermined period of time.
 40. A method asdefined in claim 39, wherein the first predetermined distance isdifferent from the second predetermined distance.
 41. A method asdefined in claim 40, wherein the first predetermined period of time isdifferent from the second predetermined period of time.
 42. A method asdefined in claim 39, wherein the first predetermined period of time isdifferent from the second predetermined period of time.
 43. A method asdefined in claim 1, further comprising: determining whether theclinician is positioned relative to the terminal such that a remotenesscondition is satisfied based at least in part on the data regarding thewirelessly detectable tag; responsive to the remoteness condition beingsatisfied, suspending the session for the clinician between the terminaland the healthcare information system.
 44. A method as defined in claim43, wherein the session for the clinician between the terminal and thehealthcare information system causes session-related informationcontained in the healthcare information system to be accessible via theterminal, wherein suspending the session for the clinician between theterminal and the healthcare information system comprises disablingaccess to the session-related information via the terminal.
 45. A methodas defined in claim 44, wherein the session for the clinician betweenthe terminal and the healthcare information system causes thesession-related information to be displayed on a display of theterminal, wherein disabling access to the session-related informationvia the terminal comprises causing at least a portion of thesession-related information to cease to be displayed on the display ofthe terminal.
 46. A method as defined in claim 43, wherein determiningthat the proximity condition is satisfied comprises obtaining anindication of the clinician being within a first predetermined distancefrom the terminal, and determining that the remoteness condition issatisfied comprises obtaining an indication of the clinician not beingwithin a second predetermined distance from the terminal.
 47. A methodas defined in claim 46, wherein the first predetermined distance isdifferent from the second predetermined distance.
 48. A method asdefined in claim 43, wherein determining that the proximity condition issatisfied comprises obtaining an indication of the clinician beingwithin a first predetermined distance from the terminal for a firstpredetermined period of time, and determining that the remotenesscondition is satisfied comprises obtaining an indication of theclinician not being within a second predetermined distance from theterminal for a second predetermined period of time.
 49. A method asdefined in claim 48, wherein the first predetermined distance isdifferent from the second predetermined distance.
 50. A method asdefined in claim 49, wherein the first predetermined period of time isdifferent from the second predetermined period of time.
 51. A method asdefined in claim 48, wherein the first predetermined period of time isdifferent from the second predetermined period of time.
 52. A method asdefined in claim 43, wherein the proximity condition is a firstproximity condition, said method further comprising: determining whetherthe clinician is positioned relative to the terminal such that a secondproximity condition is satisfied based at least in part on the dataregarding the wirelessly detectable tag; responsive to the secondproximity condition being satisfied, resuming the session for theclinician between the terminal and the healthcare information system.53. A method as defined in claim 52, wherein the session for theclinician between the terminal and the healthcare information systemcauses session-related information contained in the healthcareinformation system to be accessible via the terminal, wherein suspendingthe session for the clinician between the terminal and the healthcareinformation system comprises disabling access to the session-relatedinformation via the terminal, and wherein resuming the session for theclinician between the terminal and the healthcare information systemcomprises enabling access to the session-related information via theterminal.
 54. A method as defined in claim 52, wherein the session forthe clinician between the terminal and the healthcare information systemcauses the session-related information to be displayed on a display ofthe terminal, wherein disabling access to the session-relatedinformation via the terminal comprises causing at least a portion of thesession-related information to cease to be displayed on the display ofthe terminal, and wherein resuming the session for the clinician betweenthe terminal and the healthcare information system comprises causing theat least a portion of the session-related information to be once againdisplayed on the display of the terminal.
 55. A method as defined inclaim 52, wherein determining that the first proximity condition issatisfied comprises obtaining an indication of the clinician beingwithin a first predetermined distance from the terminal, determiningthat the remoteness condition is satisfied comprises obtaining anindication of the clinician not being within a second predetermineddistance from the terminal, and determining that the second proximitycondition is satisfied comprises obtaining an indication of theclinician being within a third predetermined distance from the terminal.56. A method as defined in claim 55, wherein at least two of the firstpredetermined distance, the second predetermined distance, and the thirdpredetermined distance are different from each other.
 57. A method asdefined in claim 52, wherein determining that the first proximitycondition is satisfied comprises obtaining an indication of theclinician being within a first predetermined distance from the terminalfor a first predetermined period of time, determining that theremoteness condition is satisfied comprises obtaining an indication ofthe clinician not being within a second predetermined distance from theterminal for a second predetermined period of time, and determining thatthe second proximity condition is satisfied comprises obtaining anindication of the clinician being within a third predetermined distancefrom the terminal for a third predetermined period of time.
 58. A methodas defined in claim 57, wherein at least two of the first predetermineddistance, the second predetermined distance, and the third predetermineddistance are different from each other.
 59. A method as defined in claim58, wherein at least two of the first predetermined period of time, thesecond predetermined period of time, and the third predetermined periodof time are different from each other.
 60. A method as defined in claim57, wherein at least two of the first predetermined period of time, thesecond predetermined period of time, and the third predetermined periodof time are different from each other.
 61. A method as defined in claim1, wherein the wirelessly detectable tag is one of an active radiofrequency identification tag, a semi-active radio frequencyidentification tag, and a passive radio frequency identification tag.62. A method as defined in claim 61, wherein the wirelessly detectabletag comprises a fingerprint reader.
 63. A method as defined in claim 1,wherein the wirelessly detectable tag is an optical frequencyidentification tag.
 64. A method as defined in claim 63, wherein thewirelessly detectable tag comprises a fingerprint reader.
 65. A methodas defined in claim 1, wherein the wirelessly detectable tag is anultrasonic acoustic pulsing identification tag.
 66. A method as definedin claim 65, wherein the wirelessly detectable tag comprises afingerprint reader.
 67. A method as defined in claim 1, wherein theclinician is one of a physician, a nurse, a laboratory technician, aradiologist, a pharmacist, and an orderly.
 68. A method as defined inclaim 1, wherein determining that the proximity condition is satisfiedcomprises obtaining an indication of (1) the clinician being within apredetermined distance from the terminal and (2) the terminal beingwithin a field of view of the clinician.
 69. A method as defined inclaim 68, wherein obtaining an indication of the terminal being within afield of view of the clinician comprises determining the field of viewof the clinician based at least in part on the data regarding thewirelessly detectable tag.
 70. A method as defined in claim 69, whereinthe field of view of the clinician is determined based at least in parton an intensity of a signal derived from the data regarding thewirelessly detectable tag.
 71. A method as defined in claim 69, whereinthe field of view of the clinician is determined based at least in parton a velocity vector of the clinician derived from the data regardingthe wirelessly detectable tag.
 72. A method as defined in claim 1,wherein the terminal is a fixed terminal.
 73. A method as defined inclaim 1, wherein the terminal is a mobile terminal.
 74. A method asdefined in claim 73, wherein the mobile terminal is a hand-held device.75. A system for managing access to a healthcare information system of ahealthcare establishment communications network, the healthcareestablishment communications network comprising a plurality ofterminals, said system comprising: a first functional entity adapted todetermine, based at least in part on data regarding wirelesslydetectable tags associated with respective clinicians, when a particularone of the clinicians is positioned relative to a particular one of theterminals such that a proximity condition is satisfied for theparticular clinician and the particular terminal; a second functionalentity adapted to enable receipt of authentication data from theparticular clinician in response to the proximity condition beingsatisfied for the particular clinician and the particular terminal; athird functional entity adapted to authenticate the particular clinicianusing the received authentication data and pre-determined authenticationdata associated with the particular clinician and contained in thehealthcare information system; and a fourth functional entity adapted toestablish a session for the particular clinician between the terminaland the healthcare information system if the received authenticationdata corresponds to the pre-determined authentication data associatedwith the particular clinician.
 76. The system defined in claim 75,further comprising: a plurality of detectors adapted to receive signalsfrom the wirelessly detectable tags associated with the clinicians andto generate therefrom the data regarding the wirelessly detectable tagsassociated with the clinicians.
 77. The system defined in claim 76,wherein the detectors are respectively associated with the terminals.78. The system defined in claim 77, wherein the data regarding thewirelessly detectable tag associated with a given one of the cliniciansincluding the particular clinician, and generated by a given one of thedetectors including the detector associated with the particularterminal, comprises a tag identifier for the given clinician and anindication of a distance of the given clinician from the given detector.79. The system defined in claim 78, wherein the indication of a distancebetween the particular clinician and the detector associated with theparticular terminal is generated on a basis of signal travel timebetween the detector associated with the particular terminal and the tagassociated with the particular clinician.
 80. The system defined inclaim 78, wherein the indication of a distance between the particularclinician and the detector associated with the particular terminal isgenerated on a basis of a signal strength being received from thewirelessly detectable tag associated with the particular clinician. 81.The system defined in claim 78, wherein the data regarding thewirelessly detectable tag associated with the particular clinicianfurther comprises the authentication data received from the particularclinician.
 82. The system defined in claim 81, wherein theauthentication data is representative of a biometric feature.
 83. Thesystem defined in claim 82, wherein the tag comprises a fingerprintscanner capable of accepting a finger and producing the authenticationdata therefrom.
 84. The system defined in claim 75, further comprising:a plurality of detectors adapted to receive signals from the wirelesslydetectable tags associated with the clinicians, to detect the presenceof identifiers of said tags in the received signals and to determineinformation indicative of a distance between said tags and individualones of the detectors; a location correlation engine adapted to process(1) the information indicative of a distance between the tag associatedwith the particular clinician and a subset of the detectors and (2)location data regarding the subset of the detectors, to generatetherefrom location data regarding the particular clinician.
 85. Thesystem defined in claim 84, wherein the location data regarding theparticular clinician corresponds to the data regarding the wirelesslydetectable tag associated with the particular clinician on which thedetermination by the first functional entity is based.
 86. The systemdefined in claim 85, wherein the terminals have a certain distributionthroughout the healthcare establishment network, and wherein thedetectors have a distribution throughout the healthcare establishmentnetwork that is different from the distribution of the terminals. 87.The system defined in claim 85, wherein the determination by the firstfunctional entity is further based on location data regarding theparticular terminal.
 88. The system defined in claim 87, wherein theparticular terminal is a fixed-wire terminal.
 89. The system defined inclaim 88, wherein the fixed-wire terminal has a pre-determined locationand wherein the location data regarding the particular terminalcorresponds to the pre-determined location of the fixed-wire terminal.90. The system defined in claim 87, wherein the particular terminal isassociated with a wirelessly detectable tag connected thereto.
 91. Thesystem defined in claim 90, wherein the detectors are further adapted toreceive signals from the wirelessly detectable tag associated with theparticular terminal, to detect the presence of an identifier of said tagin the received signals and to determine information indicative of adistance between said tag and individual ones of the detectors.
 92. Thesystem defined in claim 91, the location correlation engine beingfurther adapted to process (1) the information indicative of a distancebetween the wirelessly detectable tag associated with the particularterminal and a second subset of the detectors and (2) location dataregarding the second subset of the detectors, to generate therefrom thelocation data regarding the particular terminal.
 93. The system definedin claim 92, wherein the particular terminal is a mobile terminal. 94.The system defined in claim 84, wherein the detectors are furtheradapted to detect the presence of the authentication data associatedwith the particular clinician in the signals received from thewirelessly detectable tag associated with the particular clinician. 95.The system defined in claim 94, wherein the authentication data isrepresentative of a biometric feature.
 96. The system defined in claim95, wherein the tag comprises a fingerprint scanner capable of acceptinga finger and producing the authentication data therefrom.
 97. The systemdefined in claim 75, wherein the proximity condition is satisfied whenthe particular clinician is detected to be within a predetermineddistance of the particular terminal.
 98. The system defined in claim 75,wherein the proximity condition is satisfied when the particularclinician is detected to be within a predetermined distance of theparticular terminal for a predetermined period of time.
 99. The systemdefined in claim 75, wherein the proximity condition is satisfied when(1) the particular clinician is detected to be within a predetermineddistance of the particular terminal for a predetermined period of timeand (2) the particular terminal is detected to be within a field of viewof the particular clinician.
 100. The system defined in claim 75,wherein the third functional entity is further adapted to displayinformation on a display of the particular terminal, wherein the firstfunctional entity is further adapted to determine, based at least inpart on the data regarding the wirelessly detectable tag associated withthe particular clinician, when the particular clinician is positionedrelative to the particular terminal such that a remoteness condition issatisfied for the particular clinician and the particular terminal, andwherein the third functional entity is further adapted to cause at leasta portion of the information to cease to be displayed on the display ofthe particular terminal in response to the remoteness condition beingsatisfied for the particular clinician and the particular terminal. 101.The system defined in claim 100, wherein the proximity condition issatisfied when the particular clinician is detected to be within a firstpredetermined distance of the particular terminal and wherein theremoteness condition is satisfied when the particular clinician isdetected to be not within a second predetermined distance of theparticular terminal.
 102. The system defined in claim 100, wherein theproximity condition is satisfied when the particular clinician isdetected to be within a first predetermined distance of the particularterminal for a first predetermined period of time and wherein theremoteness condition is satisfied when the particular clinician isdetected to be not within a second predetermined distance of theparticular terminal for a second predetermined period of time.
 103. Thesystem defined in claim 100, wherein the proximity condition issatisfied when (1) the particular clinician is detected to be within afirst predetermined distance of the particular terminal for a firstpredetermined period of time and (2) the particular terminal is detectedto be within a field of view of the particular clinician, and whereinthe remoteness condition is satisfied when either (1) the particularclinician is detected to be not within a second predetermined distanceof the particular terminal for a second predetermined period of time or(2) the particular terminal is detected not to be within the field ofview of the particular terminal.
 104. The system defined in claim 100,wherein the third functional entity is further adapted to cause thesession to be suspended in response to the remoteness condition beingsatisfied for the particular clinician and the particular terminal. 105.The system defined in claim 75, comprising a fifth functional entityadapted to, responsive to the proximity condition being satisfied andprior to authentication of the clinician, access information containedin the healthcare information system in anticipation of potentialestablishment of a session for the clinician between the terminal andthe healthcare information system.
 106. A computer-readable storagemedium comprising a program element for execution by a computing deviceto manage access to a healthcare information system of a healthcareestablishment communications network, the program element including:computer-readable program code for determining, based at least in parton data regarding wirelessly detectable tags associated with respectiveclinicians, when a particular one of the clinicians is positionedrelative to a particular one of the terminals such that a proximitycondition is satisfied for the particular clinician and the particularterminal; computer-readable program code for enabling receipt ofauthentication data from the particular clinician in response to theproximity condition being satisfied for the particular clinician and theparticular terminal; computer-readable program code for causingauthentication of the particular clinician using the receivedauthentication, data and pre-determined authentication data associatedwith the particular clinician and contained in the healthcareinformation system; and computer-readable program code for establishinga session for the particular clinician between the terminal and thehealthcare information system if the received authentication datacorresponds to the pre-determined authentication data associated withthe particular clinician.
 107. A method of managing access to ahealthcare information system of a healthcare establishmentcommunications network, said method comprising: receiving data regardinga wirelessly detectable tag associated with a clinician; determiningwhether the clinician is positioned relative to a terminal of thehealthcare establishment communications network such that a proximitycondition is satisfied based at least in part on the data regarding thewirelessly detectable tag associated with the clinician; responsive tothe proximity condition being satisfied, providing an opportunity forauthentication of the clinician; identifying a patient proximate to theterminal based at least in part on data regarding a wirelesslydetectable tag associated with the patient; and responsive to successfulauthentication of the clinician: establishing a session for theclinician between the terminal and the healthcare information system;conveying information about the patient to the clinician via the sessionestablished at the terminal.